[Samba] Samba 4: Modify group members with LDAP
rowlandpenny at googlemail.com
Tue Dec 23 01:01:10 MST 2014
On 23/12/14 05:41, Greg Zartman wrote:
> I'm wanting to change group members by writing to the Active Directory
> using perl Net::LDAP.
> I noticed that AD groups have the LDAP objects "member" to list the user
> who is a member of this group. The user object then has the LDAP object
> "memberOf" to record the groups the user is a member of.
> I'm wondering if their is a mechanism in Samba AD that sets on of these if
> the other is set? That is, if I set all user members for a given group,
> will active directory update the user "memberOf" attribute?
Hi Greg, the mechanism is called 'linkid', see here:
Yes, you add the user to the group by adding a member attribute to the
groups object containing the users DN and AD will do the rest.
More information about the samba