[Samba] debug MS-PAC issue with NFS mounting resulted in host removed from samba DC without any notice
jas at eecs.yorku.ca
Tue Feb 16 20:54:33 UTC 2021
On 2/16/2021 3:50 PM, Andrew Bartlett wrote:
> On Tue, 2021-02-16 at 15:43 -0500, Jason Keltz via samba wrote:
>> I was trying to debug an NFS related issue with MS-PAC.
>> I read an article that said you can disable PAC by setting
>> userAccountControl from 4096 (default) to 33554432.
>> I used "samba-tool computer edit <server>" to make the change.
>> was no error.
>> # samba-tool computer edit j2
>> Modified computer 'j2' successfully
>> Now I wanted to see the change:
>> # samba-tool computer show j2 | grep -i userAccount
>> ERROR: Unable to find computer "j2$"
> You needed to OR in the bits (it is a bitfield), ie add the numbers,
> not replace them. You removed the flag for 'computer'.
> I hope this clarifies things,
More information about the samba