[Samba] Extending the AD schema - Cannot see attributes in RSAT

[Jonathan Hunter]

Hi Vladimir,

On Fri, 14 Sep 2018 at 18:41, Vladimir via samba <samba at lists.samba.org> wrote:
> [....]
> I have Installed samba 4.8.4 on a test machine and create some users, the
> problem is, to keep my email and all functionality that I have today, I
> need to create some classes and attributes in samba.
>[...]
> The problem is, I cannot see my created atributes on RSAT ADUC. I have set
> the option to show advanced resources, but when I select the TAB with the
> attributes editor, my newly created attributes are not there. I have tried
> to create new users, but the result is the same.

I have been running for the last few years with Samba4 (since 4.0.0,
in fact) and my schema is also extended as you describe.

I use ADUC for most of my administrative work, but as you have
discovered, ADUC doesn't let you work very well with custom
attributes. For that, I use ADSIEdit - it's not as user-friendly as
ADUC but works just fine, for my use case I can right-click on an OU
and create a new custom object; or I can edit an existing object and
alter my custom attribute properties.

However, if you just want to work with an existing object, and adjust
custom attributes of that object, there is a way. From ADUC, first
enable "View -> Advanced Features". Then, properties of your object
will show an additional "Attribute Editor" tab, you might need to
adjust the filter as I think by default it only shows attributes with
values.. but this might suffice for your needs.

I did once look into extending ADUC so as to show my custom attributes
nicely.. I think this link below was the one I was looking at.. but I
eventually gave it up as too much effort since it required
distributing custom DLLs or code to client PCs (as I recall). Do
please have a look yourself, though, and let me know if you manage it!
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-2000-server/bb727064(v=technet.10)
-- 
"If we knew what it was we were doing, it would not be called
research, would it?"
      - Albert Einstein