go-samba4
go-samba4 copied to clipboard
Edit user/group unix attributes
According samba4 wiki, Microsoft was removed Services for NIS ("Unix Attributes" tab) from windows 10 RSAT (ADUC). This created a issue to unix sysadmins that now needs to manually edit following attributes to ensure users and groups to be available to unix clients:
for users:
Field on the "Unix Attributes" tab | Active Directory attribute |
---|---|
NIS Domain | msSFU30NisDomain |
UID | uidNumber |
Logon Shell | loginShell |
Home Directory | unixHomeDirectory |
Primary group name/GID | primaryGroupID |
for groups:
Field on the "Unix Attributes" tab | Active Directory attribute |
---|---|
NIS Domain | msSFU30NisDomain |
GID (Group ID) | gidNumber |
Reference: https://wiki.samba.org/index.php/Installing_RSAT#Missing_.22Unix_Attributes.22_tab_in_ADUC_on_Windows_10
Also, you need a way to implement RFC2307 ID mappings internally in your code, providing a way to auto-generate unique uidNumber and gidNumber attributes. I'd made a SFU extension to samba-tool to calculate it. Contact me if you interested in that algorithm.
So, it's required we'll implement this functionality inside the user/group management in some way, making this tool a real alternative to RSAT.
Would be nice to see this feature. i am thankfully that some university guys from spain(?) did work on this. As it's the only webinterface for samba and it's using AdminLTE which is nice :)
If we could keep this project alive and maybe port it on python3 with new AdminLTE, that would be nice too. Scripts are fine for python3 (update print statements) but dependencies break builds