[Samba] net ads user add: Can we prompt for a password?

[TAKAHASHI Motonobu]

From: steve <steve at steve-ss.com>
Date: Fri, 17 Aug 2012 09:10:01 +0200

On 17/08/12 08:47, steve wrote:
> In a script I have this:
>
> net ads user add $1
> net ads password $1 some-pwd -UAdministrator%admin-pwd
>
> 1. Can I get net ads to prompt for a new password?

Simply "net ads password user at REALM.LOCAL -UAdministrator%password" 
get a prompt to ask the user's new password.

> 2. Is there any way I can avoid having the admin-pwd in the script?
> Administrator has a ticket but still it fails if I do not supply the
> pwd.

Try this:
-----
$ export PASSWD=admin-pwd
$ net ads passwpord $1 some-pwd -UAdministrator
-----

> When I create a user, it says his account is disabled. If I go to the DC 
> and:ç
> 
> samba-tool user setexpiry steve10 --noexpiry
> 
> It still says that the user is disabled. Why is this?

--noexpiry means that his password is never expired, not never
disabled.

AFAIK, any user created by "net ads user add" always becomes disabled
at first.

---
TAKAHASHI Motonobu <monyo at monyo.com>