[Samba] Problem to change values with ldbedit if primary group is 512 (Domain Admins)
Rowland Penny
rpenny at samba.org
Wed Jan 3 20:22:04 UTC 2024
On Wed, 03 Jan 2024 17:17:41 +0100
holgi via samba <samba at lists.samba.org> wrote:
> Dear samba community,
> I wanted to delete roaming profiles for some users with ldbedit
> according to the wiki
> https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles#Using_ldbedit_on_a_Domain_Controller
>
> It works well for every user being in 513 (Domain Users) as
> primaryGroup. Some of our users have 512 as primaryGID. For those I'm
> not able to change any value with ldbedit.
> I always get the following error:
>
> failed to add CN=(xyz01) NameX,CN=Users,DC=domain,DC=local - The
> primary group isn't settable on add operations!
>
> Does one of you have any idea how to get around this issue?
>
> Running Samba Version 4.15.13-Ubuntu
>
My suggestion would be to first upgrade Samba (if possible), 4.15.x
is no longer supported by Samba, then put everyone's Primary group ID
back to Domain Users, I can see no reason to set any users primary
group ID to Domain Admins, why did you do this ?
Rowland
More information about the samba
mailing list