[Samba] Extending the AD schema - Cannot see attributes in RSAT

Vladimir vgeraseev at gmail.com
Tue Sep 18 17:03:02 UTC 2018

Hi Jonathan, thanks for the help.

> I use ADUC for most of my administrative work, but as you have
> discovered, ADUC doesn't let you work very well with custom
> attributes. For that, I use ADSIEdit - it's not as user-friendly as
> ADUC but works just fine, for my use case I can right-click on an OU
> and create a new custom object; or I can edit an existing object and
> alter my custom attribute properties.
> I have tried this before, but my attributes are not being shown in the
ADSIEdit either.

However, if you just want to work with an existing object, and adjust
> custom attributes of that object, there is a way. From ADUC, first
> enable "View -> Advanced Features". Then, properties of your object
> will show an additional "Attribute Editor" tab, you might need to
> adjust the filter as I think by default it only shows attributes with
> values.. but this might suffice for your needs.
>  Thats the problem, my attributes are not being shown even when I enable
"View -> Advanced Features".

Can you send me the steps that you used to create a custom  attribute?? I
have tried differents approaches, but none of them have worked.
I tried creating the attributes using the MMC schema editor, creating using
a ldif on samba 4 and finally using a script on windows. None
of them worked (the attributes and class were created, but they are not
visible on my users attributes). Of course I added the class that I created
as a subclass of "User" class.

I did once look into extending ADUC so as to show my custom attributes
> nicely.. I think this link below was the one I was looking at.. but I
> eventually gave it up as too much effort since it required
> distributing custom DLLs or code to client PCs (as I recall). Do
> please have a look yourself, though, and let me know if you manage it!
> https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-2000-server/bb727064(v=technet.10)
> --
> "If we knew what it was we were doing, it would not be called
> research, would it?"
>       - Albert Einstein
I know that for having a TAB on ADUC you need to create a custom DLL, but
all I need is: make my attributes visible on
advanced atributes editor on ADUC. Just this.

As you have already done this, do you have any tip???

Thanks for your help.

> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

More information about the samba mailing list