[Samba] Unable to "show" a group using samba-tool

[Rowland penny]

On 02/04/2020 07:25, Rowland penny via samba wrote:
> On 02/04/2020 05:42, David Kowis via samba wrote:
>> On 2020-04-01 05:51, Rowland penny via samba wrote:
>>> On 01/04/2020 09:23, Rowland penny via samba wrote:
>>>> On 01/04/2020 08:23, Rowland penny via samba wrote:  >> On 
>>>> 31/03/2020 22:48, David Kowis via samba wrote: >>> Howdy! >>>
>>>>>> I'm setting up a domain controller, and things are going >>> 
>>>>>> wonderfully, but I'm running into a strange problem, only some 
>>>>>> >>> groups will display using the `samba-tool group show` 
>>>>>> command. >>> >>> <snip> root at vorador:~# samba-tool group 
>>>>>> addmembers videos dkowis >>> Added members to group videos 
>>>>>> root at vorador:~# samba-tool group >>> list | grep videos videos 
>>>>>> root at vorador:~# samba-tool group show >>> videos ERROR: Unable to 
>>>>>> find group "videos" root at vorador:~# >>> samba-tool user show 
>>>>>> dkowis | grep videos memberOf: >>> 
>>>>>> CN=videos,CN=Users,DC=dark,DC=kow,DC=is </snip> >>> >>> The group 
>>>>>> exists, I can add members to it, and those users show >>> this 
>>>>>> membership. >>> >>> I can only "show" some groups: >>> >>> <snip> 
>>>>>> root at vorador:~# samba-tool group list | egrep >>> 
>>>>>> "Administrators|Domain Users" Administrators Domain Users >>> 
>>>>>> root at vorador:~# samba-tool group show "Administrators" ERROR: >>> 
>>>>>> Unable to find group "Administrators" root at vorador:~# samba-tool 
>>>>>> >>> group show "Domain Users" dn: CN=Domain >>> 
>>>>>> Users,CN=Users,DC=dark,DC=kow,DC=is objectClass: top >>> 
>>>>>> objectClass: group cn: Domain Users description: All domain users 
>>>>>> >>> </snip> >>> >>> I'm hoping someone here can 
>> help me
>> understand why some groups >>> show up using show, and some do not. 
>> I'd really like to be able >>> to see the group details, especially 
>> for the "videos" group, as >>> it'll have GID and Unix details. >>> 
>> >>> Thanks! >>> >> Strange, what version of Samba is this ? >> >> 
>> Rowland >> >> >> > No, it isn't strange, it appears (in my opinion) 
>> to be using the > wrong search filter :-( > > it uses this filter: > 
>> > filter = ("(&(sAMAccountType=%d)(sAMAccountName=%s))" % > 
>> (ATYPE_SECURITY_GLOBAL_GROUP, ldb.binary_encode(groupname))) > > I 
>> think it should just be this: > > filter = 
>> ("(&(objectCategory=group)(sAMAccountName=%s))" % > 
>> ldb.binary_encode(groupname))) > > The first targets a specific type 
>> of group, mine targets all groups. > > Rowland > > > Er, no it 
>> doesn't :-(
>>>
>>> It should be :
>>>
>>>         filter = ("(&(objectCategory=group)(sAMAccountName=%s))" %
>>>                    ldb.binary_encode(groupname))
>>>
>>> Rowland
>>
>> I think that means it's a bug in samba-tool? Do I need to file a 
>> thing in a place?
>>
>> Thanks!
>>
>>
> No, I will prepare a patch this morning and submit it to samba-technical.
>
> Rowland
>
>
>
OK, bug report filed: https://bugzilla.samba.org/show_bug.cgi?id=14335

Patch sent to samba-technical.

Rowland