Re: [Samba] Samba 4 how to provision as simply a member of a domain

2012-08-24 Thread steve

On 24/08/12 10:47, Rowland Penny wrote:

On 24/08/12 09:28, steve wrote:

Hi
I want to try out the Samba 4 versions of smbd, nmbd and winbindd (not
samba and not as a DC) on a box which I shall join to an existing domain.
How do I provision it? Or don't I and just join it using samba tool
domain join?
Cheers,
Steve


Hi Steve,
You could try 'net ads join', the net command is there in
/usr/local/samba/bin and this is the command that would be used from a
samba 3 domain member, but I must say that I haven't yet tried this.

Rowland



Hi Rowland
Yes, thanks I could alwasy do that but I thinking more of a samba'tool 
domain join method, as a member, not a dc. Anyone had any experience iof 
this? It looks too straightforaer to me. I must have missed something

Cheers,
Steve
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.4.3 and DOS read only

2012-08-24 Thread Jim Gallagher
All,

Sorry for not following up. Crazy week.

Anyway, the "username" parameter should have been "valid users". I just
took it out, since my test share is not browseable. I also upped log level
to 4. I do not get any log entry at all when trying to set the DOS RO
attribute, and the unix permissions do not get changed. The log for my test
session is below.

Thanks,
Jim




[2012/08/24 14:12:09,  3] param/loadparm.c:5982(lp_load_ex)
  lp_load_ex: refreshing parameters
Initialising global parameters
[2012/08/24 14:12:09,  3] ../lib/util/params.c:550(pm_process)
  params.c:pm_process() - Processing configuration file
"/etc/opt/samba/sgpkg1/sgpkg1.conf"
[2012/08/24 14:12:09,  3] param/loadparm.c:4658(do_section)
  Processing section "[global]"
  doing parameter lock directory = /var/opt/samba/sgpkg1/locks
  doing parameter private dir = /var/opt/samba/sgpkg1/private
  doing parameter pid directory = /var/opt/samba/sgpkg1/locks
  doing parameter state directory = /var/opt/samba/sgpkg1/locks
  doing parameter cache directory = /var/opt/samba/sgpkg1/locks
  doing parameter include = /etc/opt/samba/sgpkg1/sgpkg1.conf.%m
[2012/08/24 14:12:09,  2] param/loadparm.c:4112(handle_include)
  Can't find include file /etc/opt/samba/sgpkg1/sgpkg1.conf.clientip
  doing parameter socket address = serverip
  doing parameter interfaces = serverip
  doing parameter bind interfaces only = yes
  doing parameter max log size = 1000
  doing parameter username map = /etc/opt/samba/sgpkg1/smbusers.map
  doing parameter security = domain
  doing parameter local master = no
  doing parameter password server = 
  doing parameter wins server = 
  doing parameter dns proxy = yes
  doing parameter encrypt passwords = yes
  doing parameter smb passwd file = /var/opt/samba/sgpkg1/private/smbpasswd
  doing parameter preserve case = yes
  doing parameter short preserve case = yes
  doing parameter dos filetime resolution = yes
  doing parameter read only = no
  doing parameter syslog = 0
  doing parameter kernel oplocks = no
  doing parameter oplocks = no
  doing parameter level2 oplocks = no
  doing parameter guest account = smbguest
  doing parameter use mmap = no
  doing parameter unix extensions = no
[2012/08/24 14:12:09,  2] param/loadparm.c:4675(do_section)
  Processing section "[vob_storage]"
  doing parameter path = /vob_storage
  doing parameter create mask = 0775
  doing parameter directory mask = 0775
  doing parameter oplocks = no
  doing parameter force group = group1
  doing parameter map archive = no
  doing parameter map hidden = no
[2012/08/24 14:12:09,  2] param/loadparm.c:4675(do_section)
  Processing section "[view_storage]"
  doing parameter path = /view_storage
  doing parameter create mask = 0775
  doing parameter directory mask = 0775
  doing parameter oplocks = no
  doing parameter force group = group1
  doing parameter map archive = no
  doing parameter map hidden = no
[2012/08/24 14:12:09,  2] param/loadparm.c:4675(do_section)
  Processing section "[build_storage]"
  doing parameter path = /build_storage
  doing parameter create mask = 0775
  doing parameter directory mask = 0775
  doing parameter oplocks = no
  doing parameter force group = group1
  doing parameter map archive = no
  doing parameter map hidden = no
[2012/08/24 14:12:09,  2] param/loadparm.c:4675(do_section)
  Processing section "[developer_views]"
  doing parameter path = /developer_views
  doing parameter create mask = 0775
  doing parameter directory mask = 0775
  doing parameter oplocks = no
  doing parameter force group = group1
  doing parameter map archive = no
  doing parameter map hidden = no
[2012/08/24 14:12:09,  2] param/loadparm.c:4675(do_section)
  Processing section "[proj1data01]"
  doing parameter path = /proj1data01
  doing parameter create mask = 0775
  doing parameter directory mask = 0775
  doing parameter oplocks = no
  doing parameter map archive = no
  doing parameter map hidden = no
[2012/08/24 14:12:09,  2] param/loadparm.c:4675(do_section)
  Processing section "[proj1lib]"
  doing parameter path = /proj1lib
  doing parameter create mask = 0775
  doing parameter directory mask = 0775
  doing parameter oplocks = no
  doing parameter map archive = no
  doing parameter map hidden = no
[2012/08/24 14:12:09,  2] param/loadparm.c:4675(do_section)
  Processing section "[Test]"
  doing parameter comment = Setup to test dos RO attribute
  doing parameter browseable = No
  doing parameter path = /home/jim
  doing parameter writeable = yes
  doing parameter ea support = no
  doing parameter store dos attributes = no
  doing parameter map readonly = yes
  doing parameter dos filemode = yes
[2012/08/24 14:12:09,  4] param/loadparm.c:6017(lp_load_ex)
  pm_process() returned Yes
[2012/08/24 14:12:09,  3] param/loadparm.c:3119(lp_add_ipc)
  adding IPC service
[2012/08/24 14:12:09,  3] printing/pcap.c:136(pcap_cache_reload)
  reloading printcap cache
[2012/08/24 14:12:09,  3] printing/print_svid.c:66(sysv_cache_reload)
  Scheduler is not runni

[Samba] migration from windows 2003 DC to samba4 DC

2012-08-24 Thread Muhammad Yousuf Khan
hello everyone.

i am Planning migrating my microsoft infrastructure to linux gradually.
i successfully migrated  Fileserver, Virtualization, Proxy. now my
goal is to replace my domain controller holding 2003 server.

i have a mix client (33 clients)  infrastructure including, WindowXP,
2003 Memeber server and Windows 7 while all are memeber of domain with
default GPO, though i wanted to use GPOs in future via samba4,

here is the detail of my domain controller,

1. 2003 Active directory
2. active directory integrated DNS with DNS forwarder.
3. DHCP.


so my questions are.

As per my understanding with DC . i can use ADC for failover.

- is it possible to install samba DC as an ADC and later promoted to DC?

- is there any one has migrated windows DC to SAMBA DC. what was
his/her strategy/experience (any suggestions would be appreciated).

- can anyone please tell me about the stability of SAMBA4. with his
personal experience  , since it is in beta stage?
  because my 2003 DC server is in production and i don't have a clue
that beta is a better way to go in production or not.


my requirement with samba4 after migration are.


1. DC
2. Integrated DNS so that when ever host join's. DNS records and other
updates in AD should be done by it self. (same ad windows  AD)
3. DHCP
4. Group policy implementation.

BTW, i am using 2.7 SAMBA as file sharing server integrated with 2003 AD.
so is it going to effect the migration or not? or samba 2.7 with
consider SAMBA4 machine as an old DC.

Thanks,
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] XP Pro client perm issues after joining samba domain

2012-08-24 Thread Chris Nighswonger
On Fri, Aug 24, 2012 at 7:54 AM, Tom Ryan wrote:

>
> I googled for
>
> internet explorer crashes when administrator
>
> Figuring that samba wasn't to blame here.
>
> The first hit I got might be your cause.. (protected mode)
>
>
Your right, Tom, it turned out not to be a samba problem at all, but your
reply headed me off in the right direction.

Being a *nix guru, I forget that win32 does have a "few" logs. A look at
the system log showed that the latest version of Avast's AWS service was
crashing IE8. Removing the "Browser Protection" module corrected the
problem. Interestingly enough, IE8 appears to be the only browser affected
this way.

Incidentally, AFAICT there is no protected mode for IE8 installed on XP.

Thanks again for helping break me loose on this!

Kind Regards,
Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Permissions incorrectly ordered on Windows after disabling inheritance

2012-08-24 Thread Walkes, Dan
Hi everyone,

I've noticed a problem with Debian wheezy + samba 3.6.6 configured with
acl_xattr in my configuration.  The following test sequence causes
Windows Explorer to report incorrectly ordered permission entries:
1)  Map a share as with "admin" user credentials  to a drive letter
on a Windows client
2)  Create a folder at the root of the share "rootfolder"
3)  Create a subfolder "subfolder1" under "rootfolder"
4)  Un-check "Include inheritable permissions from this object's
parent" in the windows security settings dialog for Windows Explorer on
the root folder
5)  Create a subfolder "subfolder2" under "subfolder1"
6)  Right-click with Windows Explorer and attempt to edit the
permissions of "subfolder2".  Windows Explorer pops up a message stating
"The permissions on subfolder2 are incorrectly ordered, which may cause
some entries to be ineffective."

This is reproducible on every Windows client system I've tried including
Windows 7, XP, Server 2008 R2 and Server 2003.
When incorrectly ordered, the permissions look like this as printed by
smbcacls smbcacls //localhost/20120821_3
rootfolder/subfolder1/subfolder2
REVISION:1
CONTROL:0x8004
OWNER:BIZNAS-H5\admin
GROUP:BIZNAS-H5\None
ACL:BIZNAS-H5\admin:ALLOWED/0x0/RWXDPO
ACL:Creator Owner:ALLOWED/OI|CI|IO|I/RWXDPO
ACL:BIZNAS-H5\None:ALLOWED/0x0/RWXDPO
ACL:Creator Group:ALLOWED/OI|CI|IO|I/RWXDPO
ACL:Everyone:ALLOWED/OI|CI|I/RWXDPO

For comparison, here is the same subfolder tree without performing step
4 above to un-check the "Include inheritable perimssions" box from
Windows explorer:
smbcacls //localhost/20120821_3 rootfolder/subfolder1/subfolder2
REVISION:1
CONTROL:0x8004
OWNER:BIZNAS-H5\admin
GROUP:BIZNAS-H5\None
ACL:BIZNAS-H5\admin:ALLOWED/0x0/RWXDPO
ACL:Creator Owner:ALLOWED/OI|CI|IO/RWXDPO
ACL:BIZNAS-H5\None:ALLOWED/0x0/RWXDPO
ACL:Creator Group:ALLOWED/OI|CI|IO/RWXDPO
ACL:Everyone:ALLOWED/OI|CI/RWXDPO admin@BizNAS-H5:/mnt/lvol0$

Note that the ACE entries are in the same order, however in the first
case where Windows reports incorrectly ordered ACE's Creator Owner,
Creator Group and Everyone ACE's include the "I" flag
SEC_ACE_FLAG_INHERITED_ACE

The share folder, rootfolder and subfolder1 permissions are as shown
below (steps 1 through 3)

smbcacls //localhost/20120821_3 rootfolder/..
REVISION:1
CONTROL:0x8004
OWNER:BIZNAS-H5\nobody
GROUP:Unix Group\root
ACL:BIZNAS-H5\nobody:ALLOWED/0x0/FULL
ACL:Unix Group\%naslocal%:ALLOWED/0x0/FULL ACL:Unix
Group\root:ALLOWED/0x0/FULL ACL:BIZNAS-H5\admin:ALLOWED/0x0/FULL
ACL:Everyone:ALLOWED/0x0/
ACL:Creator Owner:ALLOWED/OI|CI|IO/RWXDPO ACL:Creator
Group:ALLOWED/OI|CI|IO/RWXDPO ACL:Everyone:ALLOWED/OI|CI|IO/RWXDPO

smbcacls //localhost/20120821_3 rootfolder
REVISION:1
CONTROL:0x8004
OWNER:BIZNAS-H5\admin
GROUP:BIZNAS-H5\None
ACL:BIZNAS-H5\admin:ALLOWED/0x0/RWXDPO
ACL:Creator Owner:ALLOWED/OI|CI|IO/RWXDPO
ACL:BIZNAS-H5\None:ALLOWED/0x0/RWXDPO
ACL:Creator Group:ALLOWED/OI|CI|IO/RWXDPO
ACL:Everyone:ALLOWED/OI|CI/RWXDPO admin@BizNAS-H5:/mnt/lvol0$

smbcacls //localhost/20120821_3 rootfolder/subfolder1
REVISION:1
CONTROL:0x8004
OWNER:BIZNAS-H5\admin
GROUP:BIZNAS-H5\None
ACL:BIZNAS-H5\admin:ALLOWED/0x0/RWXDPO
ACL:Creator Owner:ALLOWED/OI|CI|IO/RWXDPO
ACL:BIZNAS-H5\None:ALLOWED/0x0/RWXDPO
ACL:Creator Group:ALLOWED/OI|CI|IO/RWXDPO
ACL:Everyone:ALLOWED/OI|CI/RWXDPO

Note that in each case flags OI|CI|IO are set on Creator Owner, Creator
Group and Everyone ACE's, however corresponding subfolders do not have
the "I" flag and SEC_ACE_FLAG_INHERITED_ACE set.  I would have expected
this to be set for each inherited permission.  Indeed Windows explorer
does mark these permissions as "Inherited From Z:\" where Z:\ is the
mapped share folder.

The value of subfolder1 after step 4 is:

smbcacls //localhost/20120821_3 rootfolder/subfolder1
REVISION:1
CONTROL:0x8d04
OWNER:BIZNAS-H5\admin
GROUP:BIZNAS-H5\None
ACL:BIZNAS-H5\admin:ALLOWED/I/RWXDPO
ACL:Creator Owner:ALLOWED/OI|CI|IO|I/RWXDPO
ACL:BIZNAS-H5\None:ALLOWED/I/RWXDPO
ACL:Creator Group:ALLOWED/OI|CI|IO|I/RWXDPO
ACL:Everyone:ALLOWED/OI|CI|I/RWXDPO

Note that when un-checking "Include inheritable permissions" and adding
existing permissions using Windows Explorer, Windows forces the "I"
SEC_ACE_FLAG_INHERITED_ACE flag on subfolder1 (and all subdirectories
below rootfolder) ACE's including the ACE entries "admin" and "None"
which were actually not inherited but created through the "Creator
Owner" ACE.

When viewing "Advanced Security Settings" on a folder with incorrectly
ordered permissions, Windows provides a "reorder" option.  Reordering
the ACE's results in the following permissions:

smbcacls //localhost/20120821_3 rootfolder/subfolder1/subfolder2
REVISION:1
CONTROL:0x8d04
OWNER:BIZNAS-H5\admin
GROUP:BIZNAS-H5\None
ACL:BIZNAS-H5\admin:ALLOWED/0x0/RWXDPO
ACL:BIZNAS-H5\None:ALLOWED/0x0/RWXDPO
ACL:BIZNAS-H5\admin:ALLOWED/I/RWXDPO
ACL:Creator Owner:ALLOWED/OI|CI|IO|I/RWXDPO
ACL:BIZNAS-H5\None:ALLOWED/I/RWXDPO
ACL:Creator Group:ALLOWED/OI|CI|IO|I/RWXDPO
AC

[Samba] [SAMBA] shadow_copy2 is not working for me on samba 3.6.7 and btrfs volume

2012-08-24 Thread Joeri Vanthienen
Hi,

I'm running samba 3.6.7 on a linux server:

root@SRVUBUNTU:/btrfs/samba/.btrfs# smbd -V
Version 3.6.7
root@SRVUBUNTU:/btrfs/samba/.btrfs# uname -a
Linux SRVUBUNTU 3.5.2 #1 SMP Fri Aug 17 15:26:57 CEST 2012 x86_64 x86_64
x86_64 GNU/Linux

I have a base dir to share with samba on /btrfs/samba

root@SRVUBUNTU:/btrfs/samba# ls -l
total 0
-rw-r--r-- 1 root root 0 Aug 24 13:07 a
-rw-r--r-- 1 root root 0 Aug 24 13:07 b

My snapshots are stored inside this basedir in the folder .btrfs

root@SRVUBUNTU:/btrfs/samba/.btrfs# ls -l
total 0
drwxr-xr-x 1 root root 12 Aug 24 13:15 @GMT-2012.08.24-15.15.25
drwxr-xr-x 1 root root 16 Aug 24 13:07 @GMT-2012.08.24-15.26.40

This is my smb.conf
---
[data]
   vfs objects = shadow_copy2
   shadow:snapdir = /btrfs/samba/.btrfs
   shadow:basedir = /btrfs/samba
   read only = no
   path = /btrfs/samba/
   browsable = yes
   guest ok = yes
   follow symlinks = yes
   wide links  = yes
   unix extensions = no


I can't see the snapshots in "previous versions", however I can
navigate/browse inside the windows 7 client to the (hidden) snapshot
directory, so it seems not to be a permission issue.
This worked previously fine for me on a freebsd server with zfs volumes.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] XP Pro client perm issues after joining samba domain

2012-08-24 Thread Tom Ryan

On 8/24/12 7:42 AM, "Chris Nighswonger" 
wrote:

>No takers?

I googled for

internet explorer crashes when administrator

Figuring that samba wasn't to blame here.

The first hit I got might be your cause.. (protected mode)


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] XP Pro client perm issues after joining samba domain

2012-08-24 Thread Chris Nighswonger
No takers?


On Thu, Aug 23, 2012 at 10:44 AM, Chris Nighswonger <
cnighswon...@foundations.edu> wrote:

> Samba: 3.6.6 PDC
> Client: XP Pro SP3
>
> Background:
>
> 1. Started with a clean installation of XP Pro SP3
> 2. Joined the client to the samba domain
> 3. Logged in as user 'root' the first time after the join.
> 4. Added "Domain Users" group to the "Local Admin" group on the client
> (forget about the security implications for the moment)
>
> Now when a user (any user) logs on to the client and attempt to open
> Internet Explorer 8, Explorer promptly crashes.
>
> If the local administrator is logged into the client, Explorer works as
> expected.
>
> Everything else works fine for all users including both local resources
> and domain resources.
>
> This is happening on eight clients, all with clean installations of the OS.
>
> I'm suspecting this is a hidden permissions problem, but am really at a
> loss for where to start looking or debugging.
>
> Any help would be greatly appreciated.
>
> Kind Regards,
> Chris
>
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Problem in porting samba to HP-UX

2012-08-24 Thread Dheeraj Tewani
Hi,

I am a little new to samba.

I am currently trying to port samba-3.6.6 to a HP-UX (11.31ia) machine.

On compilation i get the following error.

bugatti#make
Using CFLAGS = -I../lib/zlib -AC99 -AC99 -I.
-I/home/dheeraj/samba/samba-3.6.6/source3
-I/home/dheeraj/samba/samba-3.6.6/source3/../lib/popt
-I/home/dheeraj/samba/samba-3.6.6/source3/../lib/iniparser/src  -Iinclude
-I./include  -I. -I. -I./../lib/replace -I./../lib/tevent -I./librpc -I./..
-I./../lib/talloc -I../lib/tdb/include  -DHAVE_CONFIG_H  -Iinclude
-I./include -I. -I. -I./../lib/replace -I./../lib/tevent -I./librpc -I./..
-I./../lib/popt -DLDAP_DEPRECATED
-I/home/dheeraj/samba/samba-3.6.6/source3/lib  -I..  -D_SAMBA_BUILD_=3
-D_SAMBA_BUILD_=3
  PICFLAG= +z
  LIBS   = -lsec -lnsl
  LDFLAGS= +z  -L./bin
  DYNEXP =
-Wl,-E,+b/usr/local/lib/hpux32:/usr/lib/hpux32:/usr/local/lib/hpux64:/usr/lib/hpux64
  LDSHFLAGS  = +z -b -Wl,-B,symbolic,-b  -L./bin -lc
  SHLIBEXT   = so
  SONAMEFLAG = -Wl,+h,
creating /home/dheeraj/samba/samba-3.6.6/source3/exports/libtalloc.syms
Linking shared library bin/libtalloc.so.2
creating /home/dheeraj/samba/samba-3.6.6/source3/exports/libtdb.syms
Linking shared library bin/libtdb.so.1
Compiling passdb/pdb_ldap.c
"passdb/pdb_ldap.c", line 1764: error #2029: expected an expression
(ber_printf (ber, "ts", LDAP_TAG_EXOP_MODIFY_PASSWD_ID,
^

"passdb/pdb_ldap.c", line 1764: error #2018: expected a ")"
(ber_printf (ber, "ts", LDAP_TAG_EXOP_MODIFY_PASSWD_ID,
^

"passdb/pdb_ldap.c", line 1776: error #2029: expected an expression
 LDAP_TAG_EXOP_MODIFY_PASSWD_NEW,
 ^

"passdb/pdb_ldap.c", line 1776: error #2018: expected a ")"
 LDAP_TAG_EXOP_MODIFY_PASSWD_NEW,
 ^

4 errors detected in the compilation of "passdb/pdb_ldap.c".
The following command failed:
)
*** Error exit code 2

Stop.


"LDAP_TAG_EXOP_MODIFY_PASSWD_ID"... is defined in
/source3/include/smbldap.h. And it is rightly defined as of ber_tag_t type,
the one that ber_printf expects.

I have tried all the usual methods but the problem is not getting solved.

Need some help!
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] User profile service hangs, very slow logon after profile migration

2012-08-24 Thread Mathias Hablützel

I found a "solution" which solves my problem:

Start on the client gpedit.msc

Set maximum wait time for the network if a user has a roaming user
profile or remote home folder setting and configure Wait for network for
maximum option is 0 seconds under Computer
Configuration\Policies\Administrative Templates\System\User Profiles.

Activate Do not detect slow network connections under Computer 
Configuration\Administrative Templates\System\Logon


This fixed my issue, the logon now takes roughly between 3-45 seconds 
depending on how much data is storred in the roaming profile.


Regards,
Mathias

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 4 how to provision as simply a member of a domain

2012-08-24 Thread Rowland Penny

On 24/08/12 09:28, steve wrote:

Hi
I want to try out the Samba 4 versions of smbd, nmbd and winbindd (not 
samba and not as a DC) on a box which I shall join to an existing domain.
How do I provision it? Or don't I and just join it using samba tool 
domain join?

Cheers,
Steve


Hi Steve,
You could try 'net ads join', the net command is there in 
/usr/local/samba/bin and this is the command that would be used from a 
samba 3 domain member, but I must say that I haven't yet tried this.


Rowland


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba 4 how to provision as simply a member of a domain

2012-08-24 Thread steve

Hi
I want to try out the Samba 4 versions of smbd, nmbd and winbindd (not 
samba and not as a DC) on a box which I shall join to an existing domain.
How do I provision it? Or don't I and just join it using samba tool 
domain join?

Cheers,
Steve

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Schema modification with auxiliary class vs builtin class and vbscript

2012-08-24 Thread Hervé Hénoch

Hello

The situation is the following :

I've successfully created an auxiliary class with an attribute by 
following this method :



http://semifershome.free.fr/semifer/index.php?2008/02/12/42-etendre-le-schema-active-directory-classes-attributs-et-display-specifiers


The auxiliary class  is "allowedService" and the attribute is 
"allowedServiceAttribute".


The following VB script for changing the attribute doesn't run for the 
bold line. The first time we run the script we have the following error 
but the value of allowedServiceAttribute is successfully setted:


/Erreur : Cet objet ne gère pas cette propriété ou cette méthode 
"allowedServiceAttribute"/


But even if we run another time the script we have the following same 
message (so we can see the previous value).


The VB Script (example script)
--
dim args
dim user
dim temp

set args = wscript.arguments
set user = GetObject(args(0))

on error resume next
*temp = InputBox("Service attribute : " , , user.allowedServiceAttribute)*
user.put allowedServiceAttribute", "test value"
user.setinfo


set user = Nothing
set args = Nothing

wscript.Quit
--

Where I do not understand is that for another auxiliary class 
(PossixAccount) and another attribute (LoginShell) the bold line is ok :


*temp = InputBox(Loginshell : " , , user.LoginShell)*

and we can see the previous value of LoginShell if we have already 
setted it.


Here are the ldiff files of the auxiliary class and his attribute :

dn: CN=allowedService, CN=Schema,CN=Configuration,DC=sc,DC=isc84,DC=org
mayContain: allowedServiceAttribute
objectClass: top
objectClass: classSchema
defaultObjectCategory: 
CN=allowedService,CN=Schema,CN=Configuration,DC=sc,DC= isc84,DC=org
defaultSecurityDescriptor: 
D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCC 
DCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)
objectCategory: 
CN=Class-Schema,CN=Schema,CN=Configuration,DC=sc,DC=isc84,DC=org

schemaIDGUID:: ee+/vURt77+9H++/vUHvv73vv73nsJLvv70d77+9
subClassOf: top
cn: allowedService
objectClassCategory: 3
lDAPDisplayName: allowedService
showInAdvancedViewOnly: TRUE
distinguishedName: 
CN=allowedService,CN=Schema,CN=Configuration,DC=sc,DC=isc84,DC=org

whenChanged: 20120824065037.0Z
whenCreated: 20120823124813.0Z
governsID: 
1.2.840.113556.1.8000.2554.6382.11911.19017.19847.32977.12302487.3262913.1

adminDisplayName: allowedService
objectGUID:: UB9G77+9GwoVTO+/vUjvv71s77+977+9
rDNAttID: uid
uSNChanged: 7129
uSNCreated: 7110
instanceType: 4
adminDescription: allowedService
name: allowedService

dn: CN=allowedServiceAttribute, 
CN=Schema,CN=Configuration,DC=sc,DC=isc84,DC=org

objectClass: top
objectClass: attributeSchema
oMSyntax: 64
objectCategory: 
CN=Attribute-Schema,CN=Schema,CN=Configuration,DC=sc,DC=isc84,DC=org

isMemberOfPartialAttributeSet: TRUE
schemaIDGUID:: 77+9GUrvv70WCu+/vUzvv71T77+976SjCu+/vQ==
cn: allowedServiceAttribute
isSingleValued: TRUE
lDAPDisplayName: allowedServiceAttribute
showInAdvancedViewOnly: TRUE
searchFlags: 23
attributeID: 
1.2.840.113556.1.8000.2554.6382.11911.19017.19847.32977.12302487.3262913.1.1
distinguishedName: 
CN=allowedServiceAttribute,CN=Schema,CN=Configuration,DC=sc,DC=isc84,DC=org

whenChanged: 20120824065737.0Z
whenCreated: 20120823124919.0Z
msDS-IntId: -1322168606
adminDisplayName: allowedServiceAttribute
objectGUID:: 77+9eTDvv73vv73vv70EQe+/vSwKXgRA77+9
attributeSyntax: 2.5.5.12
uSNChanged: 7133
uSNCreated: 7113
instanceType: 4
adminDescription: allowedServiceAttribute
name: allowedServiceAttribute

Any idea ?


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba