[Samba] samba-tool group removemembers, not working

[L.P.H. van Belle]

Hai, 

Can you post the output of : 
ldbsearch --show-binary -H ldap://YOURDCNAME_HERE "(&(objectClass=computer)(sAMAccountName=MARKA$))" -k yes | grep -v '#' | grep -v 'ref:' 
(https://bugzilla.samba.org/show_bug.cgi?id=11482) 


Greetz, 

Louis



> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Denis Cardon via samba
> Verzonden: dinsdag 28 mei 2019 11:04
> Aan: Mark Foley; samba at lists.samba.org
> Onderwerp: Re: [Samba] samba-tool group removemembers, not working
> 
> Hi Mark,
> 
> > Because of other issues using ADUC, I tried to remove a 
> domain member using:
> >
> >> samba-tool group removemembers "Domain Computers" MARKA\$
> > Removed members from group Domain Computers
> >
> > As shown, it say it "Removed members", but ...
> >
> >> samba-tool group listmembers "Domain Computers"
> > :
> > LABRAT$
> > :
> > OHPRSSTORAGE$
> > MARKA$
> > :
> > COMMON$
> > :
> >
> > listmembers still shows the computer as a member of "Domain 
> Computers". What's up with this?
> 
> "Domain Computers" is the primaryGroupID of AD joined computer (515). 
> The computer object is a member not because it is listed in the group 
> membership, but because of its primaryGroupID attribute. If 
> you want to 
> get it out of "domain computers", you have to change that 
> attribute to 
> something else.
> 
> You can test with a different group than "Domain computers" 
> or "Domain 
> computers", it will work as intended.
> 
> I admit that the message is misleading though. By the way, why do you 
> want to remove that computer from "Domain Computers" group?
> 
> Cheers,
> 
> Denis
> 
> >
> > Samba Version 4.8.2
> >
> > THX --Mark
> >
> 
> -- 
> Denis Cardon
> Tranquil IT
> 12 avenue Jules Verne (Bat. A)
> 44230 Saint Sébastien sur Loire (FRANCE)
> tel : +33 (0) 240 975 755
> http://www.tranquil.it
> 
> Tranquil IT recrute! https://www.tranquil.it/nous-rejoindre/
> Samba install wiki for Frenchies : https://dev.tranquil.it
> WAPT, software deployment made easy : https://wapt.fr
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>