[Samba] Active Directory List Object Mode
matthias.leopold at meduniwien.ac.at
Mon Jun 29 13:48:21 UTC 2020
Am 26.06.20 um 18:40 schrieb Matthias Leopold via samba:
> Am 26.06.20 um 11:07 schrieb Matthias Leopold via samba:
>> I'm trying to hide objects in Samba AD 4.12.3 for certain users.
>> I found several tutorials, they all mention "List Object Mode" as an
>> option. Is this supposed to work with Samba AD? I was able to enable
>> it, but it doesn't seem to have any effect when I follow the recipes
>> for hiding objects.
>> When using the other option (deny "List contents") I had the problem
>> that objects in child OUs where still visible in subtree searches.
>> I'm new to AD, maybe it's my fault, but I would be glad for some advice.
> I solved the first part of the mystery (objects always visible in "List
> Object Mode") by removing "Authenticated Users" from "Pre-Windows-2000
> Compatible Access". Now I'm having the inverse problem (objects always
> invisible in OU with "List contents" removed regardless of objects "List
> object" setting). So I'm still under the impression, that "List Object
> Mode" "doesn't work with Samba" (I never tried it with Microsoft AD),
> but it may well be my fault and this might not be the right place to
> discuss this. If somebody nevertheless recognizes my problem and gives a
> hint, I would be grateful
I tried "List Object Mode" now on a MS AD (2019), where it works as
expected, so I know I configured it correctly. It's sad that it doesn't
work with Samba. Are there any plans to support it in the future?
More information about the samba