[Samba] how to set valid allowed workstation logins
John H Terpstra
jht at samba.org
Tue Feb 14 04:18:43 GMT 2006
On Sunday 12 February 2006 13:36, Chris wrote:
> I'm having trouble setting the Workstations value on a tdbsam backend
> using pdbedit. I can't seem to find the correct syntax to accomplish
> this.
I have always used the NT4 Domain User Manager to configure the allowed
workstation setting.
The pdbedit utility does not permit setting this constraint.
>
> I found some references in an older version of the HOWTO where there
> existed "Chapter 10. Account Information Databases". This whole chapter
> is missing from the current HOWTO even though it is referenced in the
> newest version (a link in chapter 33 under "Passdb Backends and
> Authentication"). In fact, it seems that there is very little
> information on pdbedit and these backends in the version I'm now
> viewing.
Thanks for pointing me to this breakage. I just fixed it in SVN. Expect the
next update of the Samba3-HOWTO to again include this documentation.
> Also, virtually every link in the HOWTO points to the TOC instead of
> directly to the section in question. Is this by design?
Nope. It has been fixed.
> In the version where there exists an "Account Information Databases"
> chapter there is this example:
> ===========================================
> The following is an example of the user account information that is
> stored in a tdbsam password backend. This listing was produced by
> running:
> $ pdbedit -Lv met
> UNIX username: met
> NT username:
> Account Flags: [UX ]
> User SID: S-1-5-21-1449123459-1407424037-3116680435-2004
> Primary Group SID: S-1-5-21-1449123459-1407424037-3116680435-1201
> Full Name: Melissa E Terpstra
> Home Directory: \\frodo\met\Win9Profile
> HomeDir Drive: H:
> Logon Script: scripts\logon.bat
> Profile Path: \\frodo\Profiles\met
> Domain: MIDEARTH
> Account desc:
> Workstations: melbelle
> Munged dial:
> Logon time: 0
> Logoff time: Mon, 18 Jan 2038 20:14:07 GMT
> Kickoff time: Mon, 18 Jan 2038 20:14:07 GMT
> Password last set: Sat, 14 Dec 2002 14:37:03 GMT
> Password can change: Sat, 14 Dec 2002 14:37:03 GMT
> Password must change: Mon, 18 Jan 2038 20:14:07 GMT
> ===========================================
>
> Which clearly shows a non-null "Workstations" value in a tdbsam backend.
> But there is no specific pdbedit syntax provided for changing it, nor
> does the man page make it clear.
>
> Assistance appreciated.
>
> Chris
- John T.
More information about the samba
mailing list