[Samba] net ads status stripped output

Rowland penny rpenny at samba.org
Wed Jun 3 10:35:38 UTC 2020


On 03/06/2020 10:39, Markus Lindberg via samba wrote:
> Hi all,
>
> I have successfully joined a Ubuntu 20.04 (focal) machine to a
> Active Directory domain using ADS. Running the `net ads status` command
> does not output the information that I expect.
>
> This is an example of running `net ads status` on a Ubuntu 20.04
> (focal) machine running Samba version 4.11.6-Ubuntu.
Are you running this as a 'normal' user ?

I get something similar when run as a normal user, but if I run it as 
myself (member of Domain Admins), I get 464 lines.

> This is Samba config being used (displayed using testparm command).
>
> # testparm
>
> [global]
> 	
> 	server min protocol = NT1
Why 'NT1' ?
> 	idmap config * : range = 300000-400000
> 	idmap config examplenet:unix_nss_info = yes
> 	idmap config examplenet:gid = 120-65535
> 	idmap config examplenet:uid = 120-65535
> 	idmap config examplenet:default = yes
> 	idmap config examplenet:range = 200-30000
> 	idmap config examplenet:backend = ad
> 	idmap config * : backend = tdb

Where did you get 'idmap config examplenet:gid = 120-65535' line from ?

Same goes for the 'uid' version as well.

'idmap config examplenet:default = yes' does not exist

Why are you using the range '200-30000' ?

Have you added any uidNumber and gidNumber attributes to AD ?

> 	include = /etc/samba/local_shares.conf
>
What is in the include file ?

Rowland





More information about the samba mailing list