[Samba] Creating users via Perl Net::LDAP

[Michael Ray]

Pablo- 

I'm certainly no expert on the matter, but what comes to mind quickly: is the user account enabled? If it is enabled, is a password set? 
It may be this simple, as I have just added a user to AD via the windows ldifde tool and he was defined as far as a CN and objectClass. When I look him up in the database, his objectSID, sAMAccountName/Type and everything else necessary is populated. 
If I set a password and enable the account, I can log in as him. 

The gist of this being, I think you ought to be able to create a user creation script. 

Let me know how it goes too, I may end up trying to do something similar. 

Good luck, 
Mike Ray 


----- Original Message -----

From: "Pablo T. Virgo" <pvirgo at solutionsforprogress.com> 
To: samba at lists.samba.org 
Sent: Monday, January 28, 2013 1:49:55 PM 
Subject: [Samba] Creating users via Perl Net::LDAP 

Hey there folks, 

I put together a little Perl script that makes an LDAP connection to a Samba4 server and creates the cn=username,cn=users,... part of a user account. 

It appears that this is not sufficient to get a fully functioning Active Directory type log-in; from the howto I can deduce that my effort is missing a sidMap, and there might be a good deal more to creating full AD users and groups than the simple LDAP entry as I had hoped. 

1. Is it reasonable to think that one could create a full AD user / group in Samba 4 using an LDAP type interface? 

2. If so, aside from attempting to read the code (I'm not currently fluent in Python), where would I find documentation on what data needs to be generated? Sorry if my google and Really-Fine-Manual glasses have failed. 

Before someone points out my obvious mistake of reinventing the wheel, the short version is that I'm hoping to manage users for a custom environment that needs to sync a bunch of weird parts, and was hoping to write something that could manage them all via APIs and network interfaces rather than just writing a bash wrapper that would only work on a master server. 

Thanks for your help! 

-- 
Pablo Virgo 
System Administrator 

Solutions for Progress, Inc. 
728 South Broad Street 
Philadelphia, PA 19146 

Phone: 215-701-8075 
Fax: 215-972-8109 

-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba