なかのにっき

Apr  9 04:14:00 babaserv slapd[3181]: <= bdb_equality_candidates: (displayName) not indexed

#!/bin/sh
uid=12600

for u in user1 user2
do
   uid=`expr $uid + 1`
   echo $uid $u
 
   smbldap-useradd -a -u $uid -g users -G "Domain Users" -d /home/$u -C '\\babaserv\userhome' -D "U:" $u
   sudo smbldap-passwd $u
   sudo smbldap-usermod --shadowMax 99999 $u
 
   sudo mkdir /home/$u
   sudo chown $u.users /home/$u
   sudo chmod 755 /home/$u

   sudo -u $u mkdir /home/$u/Documents
   sudo -u $u mkdir /home/$u/Music
   sudo -u $u mkdir /home/$u/Pictures
   sudo -u $u mkdir /home/$u/Videos

   sudo -u $u vi /home/$u/.forward
done

Failed to modify SMB password: Insufficient access at /usr/sbin/smbldap-passwd line 184, <STDIN> line 3.

@@ -3,7 +3,7 @@
 objectClass: olcHdbConfig
 olcDatabase: {1}hdb
 olcSuffix: dc=surf,dc=st,dc=seikei,dc=ac,dc=jp
-olcAccess: {0}to attrs=userPassword,shadowLastChange,sambaNTPassword,sambaLMPassword  by dn="cn=admin,dc=ふがほげ" write  by anonymous auth  by self write  by * none
+olcAccess: {0}to attrs=userPassword,shadowLastChange,sambaNTPassword,sambaLMPassword,sambaPwdMustChange,sambaPwdLastSet by dn.base="cn=admin,dc=ふがほげ" write by anonymous auth by self write by * none
 olcAccess: {1}to dn.base=""  by * read
 olcAccess: {2}to *  by dn.base="ふがほげ" write  by * read
 olcAddContentAcl: FALSE

 The <dnstyle> is optional; however, it is recommended to specify it  to  avoid  ambigui‐
 ties.   Base (synonym of baseObject), the default, or exact (an alias of base) indicates
 the entry whose DN is equal to the <dnpattern>; one (synonym of onelevel) indicates  all
 the  entries  immediately  below the <dnpattern>, sub (synonym of subtree) indicates all
 entries in the subtree at the <dnpattern>, children  indicates  all  the  entries  below
 (subordinate to) the <dnpattern>.

＠ 「示強」「示量」の読み: