Re: [Samba] how to set valid allowed workstation logins

On Sunday 12 February 2006 13:36, Chris wrote:
> I'm having trouble setting the Workstations value on a tdbsam backend
> using pdbedit. I can't seem to find the correct syntax to accomplish
> this.

I have always used the NT4 Domain User Manager to configure the allowed
workstation setting.

The pdbedit utility does not permit setting this constraint.

>
> I found some references in an older version of the HOWTO where there
> existed "Chapter 10. Account Information Databases". This whole chapter
> is missing from the current HOWTO even though it is referenced in the
> newest version (a link in chapter 33 under "Passdb Backends and
> Authentication"). In fact, it seems that there is very little
> information on pdbedit and these backends in the version I'm now
> viewing.

Thanks for pointing me to this breakage. I just fixed it in SVN. Expect the
next update of the Samba3-HOWTO to again include this documentation.

> Also, virtually every link in the HOWTO points to the TOC instead of
> directly to the section in question. Is this by design?

Nope. It has been fixed.

> In the version where there exists an "Account Information Databases"
> chapter there is this example:
> ===========================================
> The following is an example of the user account information that is
> stored in a tdbsam password backend. This listing was produced by
> running:
> $ pdbedit -Lv met
> UNIX username: met
> NT username:
> Account Flags: [UX ]
> User SID: S-1-5-21-1449123459-1407424037-3116680435-2004
> Primary Group SID: S-1-5-21-1449123459-1407424037-3116680435-1201
> Full Name: Melissa E Terpstra
> Home Directory: \\frodo\met\Win9Profile
> HomeDir Drive: H:
> Logon Script: scripts\logon.bat
> Profile Path: \\frodo\Profiles\met
> Domain: MIDEARTH
> Account desc:
> Workstations: melbelle
> Munged dial:
> Logon time: 0
> Logoff time: Mon, 18 Jan 2038 20:14:07 GMT
> Kickoff time: Mon, 18 Jan 2038 20:14:07 GMT
> Password last set: Sat, 14 Dec 2002 14:37:03 GMT
> Password can change: Sat, 14 Dec 2002 14:37:03 GMT
> Password must change: Mon, 18 Jan 2038 20:14:07 GMT
> ===========================================
>
> Which clearly shows a non-null "Workstations" value in a tdbsam backend.
> But there is no specific pdbedit syntax provided for changing it, nor
> does the man page make it clear.
>
> Assistance appreciated.
>
> Chris

- John T.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba