07Samba tool - amagerard/Samba-AD GitHub Wiki

HOME

Return to SambAD

RedHat/Educpedia/sambaAD.

01- Network 02- SambaAD 03- PdnsRecursor 04- Settings 05- Maintenance
06- SecondaryAD 07- Samba-tool 08- Selinux 09- GnomeShell 10- Troubleshoots

7. Samba-tool.

7.1 Users and groups.

https://sleeplessbeastie.eu/2022/05/16/how-to-manage-unix-groups-and-users-in-samba-active-directory/

Create groups.
samba-tool group add cats --gid-number 8000 --nis-domain OCTOCAT --description "Cats group"

Edit group.
samba-tool group edit cats

Create users.

samba-tool user create \  
                octo 0ctOpass \  
                  --given-name Octo --surname Cat --home-directory /home/octocat \  
                  --uid octo --uid-number 10000 --gid-number 10000 \  
                  --unix-home /home/octocat  \  
                  --gecos 'Octo Cat' \  
                  --nis-domain OCTOCAT \  
                  --login-shell=/bin/bash

samba-tool user create bigcatop vmDev8Pass!

Display user information.
samba-tool user show bigcatop

Get user groups.
samba-tool user getgroups bigcatop

List users.
samba-tool user list

Define password expiration.
samba-tool user setexpiry --days 120 bigcatop
samba-tool user setexpiry --noexpiry bigcatop

Add user to group.
samba-tool group addmembers cats bigcatop,toto

List groups.
samba-tool group list

List group members.
samba-tool group listmembers cats

Remove user from a group.
samba-tool group removemembers cats bidcatop

Delete group.
samba-tool group delete cats

Delete user.
samba-tool user delete bigcatop

Change user password.
samba-tool user password -U bigcatop

7.2 DCs.

View FSMO role owners.
samba-tool fsmo show

Verifying synchronization in multiple DCs.
samba-tool drs showrepl

Transfer of FSMO roles.
Execution must be done on the domain controller that takes over the role(s).
samba-tool fsmo transfer --role=all -U administrator

Removing a domain controller.
The execution must be done on the domain controller that is removed from the domain
with a local account (not from the domain).
samba-tool domain demote -U administrator