Re: [Samba] User management scripts in AD mode...
- Date: Wed, 21 Jun 2017 18:15:00 +0100
- From: Rowland Penny via samba <samba@xxxxxxxxxxxxxxx>
- Subject: Re: [Samba] User management scripts in AD mode...
On Wed, 21 Jun 2017 18:52:59 +0200
Marco Gaiarin via samba <samba@xxxxxxxxxxxxxxx> wrote:
> I'm testing the upgrade of some domains from NT mode (LDAP backend)
> to AD mode.
> In NT mode i was (ab)used to the smbldap-tools to user management, and
> i've also extended a bit to manage, eg, email aliases and forwarding.
> Now, in AD mode, i can relay only to samba-tool, and seems to me that
> something misses. Apart the 'reset password' in other thread, for
> a) i've not found a way to modify a user: i can create and delete, but
> not modify it (as smbldap-usermodify do).
smbldap-tools wasn't a Samba tool, but samba-tool is and there are
several gaps in what it can do. So you need to do what the writers of
smbldap-tools did, write your own scripts.
> b) group management seems to me only ''group centric'', eg i can
> manage membership in group, but not in users; eg, i can modify
> members of a group, but not modify groups of a user (as
> smbldap-usermodify do).
Not sure what you are getting at here, if you add a user to a group in
AD, you not only get a record in the group object, you also get a
record in the users object
member: CN=Rowland Penny,CN=Users,DC=samdom,DC=example,DC=com
dn: CN=Rowland Penny,CN=Users,DC=samdom,DC=example,DC=com
So you don't have to modify the user at all, again samba-tool can do
things like this for you, see 'samba-tool group --help'
> I'm simply ''confused'' by that, i'm asking only some feedback.
> I'm looking at Samba4 and AD domains only by some weeks, so probably
> there's good reason to do so, and i don't see them...
> But i'm also ask a more generic question: smbldap-tools was perl code,
> modular and was very easy to reuse most of the code to make some
> I want to create some ''samba-user'' addon script, there's some code
> documentation/walkthrou/examples... i can read on?
> All the (modules) code is here, right?
Yes that is the python code for most of 'samba-tool'
To unsubscribe from this list go to the following URL and read the