[Samba] how to set valid allowed workstation logins

[John H Terpstra]

On Sunday 12 February 2006 13:36, Chris wrote:
> I'm having trouble setting the Workstations value on a tdbsam backend
> using pdbedit. I can't seem to find the correct syntax to accomplish
> this.

I have always used the NT4 Domain User Manager to configure the allowed 
workstation setting.

The pdbedit utility does not permit setting this constraint.

>
> I found some references in an older version of the HOWTO where there
> existed "Chapter 10. Account Information Databases". This whole chapter
> is missing from the current HOWTO even though it is referenced in the
> newest version (a link in chapter 33 under "Passdb Backends and
> Authentication"). In fact, it seems that there is very little
> information on pdbedit and these backends in the version I'm now
> viewing.

Thanks for pointing me to this breakage. I just fixed it in SVN. Expect the 
next update of the Samba3-HOWTO to again include this documentation. 

> Also, virtually every link in the HOWTO points to the TOC instead of
> directly to the section in question. Is this by design?

Nope. It has been fixed.

> In the version where there exists an "Account Information Databases"
> chapter there is this example:
> ===========================================
> The following is an example of the user account information that is
> stored in a tdbsam password backend. This listing was produced by
> running:
> $ pdbedit -Lv met
> UNIX username:        met
> NT username:
> Account Flags:        [UX         ]
> User SID:             S-1-5-21-1449123459-1407424037-3116680435-2004
> Primary Group SID:    S-1-5-21-1449123459-1407424037-3116680435-1201
> Full Name:            Melissa E Terpstra
> Home Directory:       \\frodo\met\Win9Profile
> HomeDir Drive:        H:
> Logon Script:         scripts\logon.bat
> Profile Path:         \\frodo\Profiles\met
> Domain:               MIDEARTH
> Account desc:
> Workstations:         melbelle
> Munged dial:
> Logon time:           0
> Logoff time:          Mon, 18 Jan 2038 20:14:07 GMT
> Kickoff time:         Mon, 18 Jan 2038 20:14:07 GMT
> Password last set:    Sat, 14 Dec 2002 14:37:03 GMT
> Password can change:  Sat, 14 Dec 2002 14:37:03 GMT
> Password must change: Mon, 18 Jan 2038 20:14:07 GMT
> ===========================================
>
> Which clearly shows a non-null "Workstations" value in a tdbsam backend.
> But there is no specific pdbedit syntax provided for changing it, nor
> does the man page make it clear.
>
> Assistance appreciated.
>
> Chris

- John T.