[Samba] user works on DC, not on DM

[Rowland Penny]

On Fri, 1 Sep 2017 10:09:43 +0200
"Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:

> Am 2017-09-01 um 10:02 schrieb Rowland Penny via samba:
> > It all depends on what version of Windows you are running RSAT on,
> > If you are using a version before Win10, you can add the Unix
> > attributes tab and set the uidNumber there. Windows 10 doesn't have
> > the Unix attributes tab, it has been removed, so you would have to
> > use the attribute editor.
> 
> The admin runs Win7 pro on his RSAT-machine.
> I will google how to add that tab.
> 
> In general: why isn't that attribute added automatically?

Because no one knows what to set the ID to and Samba doesn't have the
'counting' attributes by default.

> 
> 
> > If you want to do this on the Samba DC, then you can create new
> > users with the required rfc2307 attributes using 'samba-tool user
> > create'.
> 
> The mentioned user was created like that, and seems not to have that
> attribute ... ?

Probably because the create command wasn't run correctly, to create a
Unix user with samba-tool you need something like this:

samba-tool user create User5 passw5rd --nis-domain=samdom
--unix-home=/home/User5 --uid-number=10005 --login-shell=/bin/false
--gid-number=10000

Your user was probably created with this:

samba-tool user create User5 passw5rd

Which makes it just a windows user.

> > If you want to add rfc2307 attributes, then you will have to write
> > your own scripts, there are no Samba tools to do this.
> 
> I expected things to get easier with ADS ;-)

Once you get everything right, it is ;-)

Rowland