[Samba] Restore a user?

[Jason Pyeron]

[As a separate thread, I am going to do  post mortem of how I got here - and what not to do. I have a locked computer logged in as this user - need to unlock and access unsaved content.]

I either need to resore the user or create a new user of the same name and sid.

I am using Version 4.8.2 - commit e64d0d03351ce8fbc1f929fa86dcfd8d56183f35 .

Names have been changed to protect the guilty.

# ldbrename -e nano -H /usr/local/samba/private/sam.ldb  'CN=username\0ADEL:efefde21-48da-4fb0-b47c-9eafcefc45fe,CN=Deleted Objects,DC=domain' CN=username,CN=Users,DC=domain
rename of 'CN=username\0ADEL:efefde21-48da-4fb0-b47c-9eafcefc45fe,CN=Deleted Objects,DC=domain' to 'CN=username,CN=Users,DC=domain' failed - ldb_wait from ldb_rename with LDB_WAIT_ALL: No such object (32)

Reading https://bugzilla.samba.org/show_bug.cgi?id=10371 says this is due to "where restoring an object would cause a duplicate DN". I have checked within my limits, there are not duplicate target DNs.

Selected attributes from the record are:

dn: CN=username\0ADEL:efefde21-48da-4fb0-b47c-9eafcefc45fe,CN=Deleted Objects,DC=domain
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
isDeleted: TRUE
isRecycled: TRUE

Am I having issues because of isRecycled ? - https://bugzilla.samba.org/show_bug.cgi?id=10371 says: "Recycle bin is not a supported feature right now" and "After reading this, I provisioned a new domain _and did not enable the recycle bin_. In this case the ldbmodify works like you described it in the Wiki. It would be great if you could get it working with recycle bin enabled too."

Things I read which do not seem to get me very far:

* http://redtic.uclv.cu/dokuwiki/restoring_deleted_ad_objects
* https://lists.samba.org/archive/samba/2017-August/210589.html
* https://www.google.com/search?q=ldbrename+deleted+object
* https://wiki.samba.org/index.php/User_and_Group_management
* https://wiki.samba.org/index.php/Adding_users_with_samba_tool
* https://www.bing.com/search?q=show+user+sid&rlz=1C1CHZL_enUS740US743&oq=show+user+sid&aqs=chrome..69i57j69i60j0l4.3635j0j7&sourceid=chrome&ie=UTF-8
* https://superuser.com/questions/862802/how-to-change-samba-user-sid
* https://www.google.com/search?q=wiki+samba+active+directory+recycle+bin

-Jason

--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-                                                               -
- Jason Pyeron                      PD Inc. http://www.pdinc.us -
- Principal Consultant              10 West 24th Street #100    -
- +1 (443) 269-1555 x333            Baltimore, Maryland 21218   -
-                                                               -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-