Debian 9 Stretch
Sponsored Link

Samba AD DC : Basic User Management
2017/06/25
 
This is the basic user management for Samba4 Active Directory Domain Controller.
[1] Display domain users list.
root@smb:~#
samba-tool user list 

Administrator
debian
krbtgt
Guest
[2] Add a domain user.
root@smb:~#
samba-tool user create debian

New Password:    
# set password

Retype Password:
User 'debian' created successfully
# see many other options with "samba-tool user add --help"
[3] Delete a domain user.
root@smb:~#
samba-tool user delete debian

Deleted user debian
[4] Reset password for a user.
root@smb:~#
samba-tool user setpassword debian

New Password:
Changed password OK
[5] Set expiry for a user.
root@smb:~#
samba-tool user setexpiry debian --days=7

Expiry for user 'debian' set to 7 days.
[6] Disable/Enable user account.
root@smb:~#
samba-tool user disable debian
root@smb:~#
samba-tool user enable debian

Enabled user 'debian'
[7] Display domain groups list.
root@smb:~#
samba-tool group list 

Allowed RODC Password Replication Group
Enterprise Read-Only Domain Controllers
Denied RODC Password Replication Group
...
...
DnsAdmins
Guests
Users
[8] Display members in a group.
root@smb:~#
samba-tool group listmembers "Domain Users" 

debian
krbtgt
Administrator
[9] Add a domain group.
root@smb:~#
samba-tool group add ServerWorld

Added group ServerWorld
# see many other options with "samba-tool group add --help"
[10] Delete a domain group.
root@smb:~#
samba-tool group delete ServerWorld

Deleted group ServerWorld
[11] Add/remove a member from a domain group.
root@smb:~#
samba-tool group addmembers ServerWorld debian

Added members to group ServerWorld
root@smb:~#
samba-tool group removemembers ServerWorld debian

Removed members from group ServerWorld
 
Tweet