[Samba] tattooing of tdbsam backend with logon script value

[TAKAHASHI Motonobu]

From: Pat Emblen <samba at talbragar.com.au>
Date: Tue, 18 Oct 2011 14:32:08 +1100

> On 18/10/11 11:19, TAKAHASHI Motonobu wrote:
> >> On 15:21:48 wrote Pat Emblen:
> >>>> pdbedit -S ""<user>
> >>>
> >>> Not here, it just sets an empty logon script, it doesn't default back
> >>> to the one in smb.conf.
> >>>
> >>> root at sheldon:/home/smb/netlogon# pdbedit -S "" talcom
> > (snip)
> >
> > Do you use "old" passdb such as smbpasswd or ldapsam_compat?
> 
> passdb = tdbsam

Sorry, I mistook to edit. What I wanted to say is ...

---
> > Is there a way to reset said users, removing the tattooing effect?
> Set the value of "logon script" to the empty string "".
> 
> # pdbedit -S "" <user>
> 
> This works with ldapsam and should also work with tdbsam.

No, as menthioned repeatly in this list:
  http://lists.samba.org/archive/samba/2011-June/163006.html
  http://lists.samba.org/archive/samba/2010-December/159763.html

I think this should be by design as well as Windows NT domain does.
---

BTW, I examined on ldap:editposix environment and found that `pdbedit -S
"" <user>` works as Harry said.

In smbldap-tools and tdbsam environment, `pdbedit -S "" <user>` works
as I said.

> Those other posts refer to Logon Path, not Logon Script, I suppose you 
> mean that both wont reset back to default.

I think that this behavior is applied for logon path / logon script /
logon home / logon drive.

---
TAKAHASHI Motonobu <monyo at samba.gr.jp>