[Samba] Active Directory List Object Mode

[Matthias Leopold]

Am 26.06.20 um 18:40 schrieb Matthias Leopold via samba:
> Am 26.06.20 um 11:07 schrieb Matthias Leopold via samba:
>> Hi,
>>
>> I'm trying to hide objects in Samba AD 4.12.3 for certain users.
>> I found several tutorials, they all mention "List Object Mode" as an 
>> option. Is this supposed to work with Samba AD? I was able to enable 
>> it, but it doesn't seem to have any effect when I follow the recipes 
>> for hiding objects.
>>
>> When using the other option (deny "List contents") I had the problem 
>> that objects in child OUs where still visible in subtree searches.
>>
>> I'm new to AD, maybe it's my fault, but I would be glad for some advice.
>>
>>
>>
> 
> I solved the first part of the mystery (objects always visible in "List 
> Object Mode") by removing "Authenticated Users" from "Pre-Windows-2000 
> Compatible Access". Now I'm having the inverse problem (objects always 
> invisible in OU with "List contents" removed regardless of objects "List 
> object" setting). So I'm still under the impression, that "List Object 
> Mode" "doesn't work with Samba" (I never tried it with Microsoft AD), 
> but it may well be my fault and this might not be the right place to 
> discuss this. If somebody nevertheless recognizes my problem and gives a 
> hint, I would be grateful
> 
> 

I tried "List Object Mode" now on a MS AD (2019), where it works as 
expected, so I know I configured it correctly. It's sad that it doesn't 
work with Samba. Are there any plans to support it in the future?

Matthias