[Samba] security = ads, backend = ad parameter not working in samba 4.10.10

Rowland penny rpenny at samba.org
Thu Dec 5 19:56:12 UTC 2019


On 05/12/2019 19:48, Sérgio Basto wrote:
> I made the packages [1] (BTW I'm a fedora packager maintainer ).
>
> [1] https://github.com/sergiomb2/sambaad
You have used heimdal and not MIT, haven't you ?
>
>>> I just migrate the users and his password nothing more  ... I had
>>> to
>>> remove a lot of fields,  OU(s) etc for example: [1] .
>> Just which user attributes did you migrate ?
>>
>> The users objectSid would have contained the SID of the old Domain,
>> for
>> instance.
> Not objectSid, here is the complete list of attributes [2] extracted
> from the final file that was imported  .
>
> [2]
> accountExpires:
> badPasswordTime:
> badPwdCount:
> cn:
> description:
> displayName:
> distinguishedName:
> dn:
> givenName:
> initials:
> lastLogoff:
> lastLogon:
> lastLogonTimestamp:
> logonCount:
> logonHours:
> msDS-SupportedEncryptionTypes:
> mSMQDigests:
> mSMQSignCertificates:
> name:
> objectCategory:
> objectClass:
> sAMAccountName:
> servicePrincipalName:
> sn:
> streetAddress:
> unicodePwd:
> userAccountControl:
> userParameters:
> userPrincipalName:
>
>>> And is working very well, I'm very happy, yesterday I upgrade all
>>> DC(s)
>>> to samba 4.10.10 and it was very smooth .
>> This sure surprises me, people have upgrading correctly and have had
>> problems.
> No one complained, until now :)
OK, you might have got away with it this time, but please don't try it 
again ;-)

Rowland





More information about the samba mailing list