[Samba] samba-tool user disable doesn't change any object attributes?
thuwrx10 at gmail.com
Thu Aug 24 13:56:47 UTC 2023
Ah I understand the 512 + 2 thing.
But the userAccountControl is still 512 after I run `samba-tool user disable`
Rowland Penny via samba <samba at lists.samba.org> 于2023年8月24日周四 21:38写道：
> On Thu, 24 Aug 2023 21:12:38 +0800
> Reese Wang via samba <samba at lists.samba.org> wrote:
> > I used `samba-tool user disable testuser` to disable a user and
> > `samba-tool user show testuser` to display the user object and found
> > nothing was changed. And I can still get the user using filter
> > (&(objectClass=user)(sAMAccountName=testuser)(!(userAccountControl:1.2.840.1135188.8.131.523:=2)))
> > Shouldn't `samba-tool user disable` change userAccountControl to 2 or
> > something?
> Close :-)
> userAccountControl is sort of accumulative, a normal enabled user
> account will have '512' in it, but there could be a larger number set.
> For instance, if the users password is set to never expire it could be
> '65848', which is '512' plus '65336'.
> To disable a user you add '2' to the '512'.
> Try reading this:
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
More information about the samba