Bug 13182 - Cannot remove Workstation Logon Restrictions (Log On To) - net sam set worktations
Summary: Cannot remove Workstation Logon Restrictions (Log On To) - net sam set workta...
Status: NEW
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: AD: LDB/DSDB/SAMDB (show other bugs)
Version: 4.6.6
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: Andrew Bartlett
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-12-11 22:35 UTC by Chris Smith
Modified: 2017-12-12 06:20 UTC (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Chris Smith 2017-12-11 22:35:42 UTC 
Samba4-4.6.6 AD
"net sam set workstations" fails to remove all entries to allow a user to logon to all systems.

It worked in a Samba3 PDC environment by using a null value or "" (can't remember which) such as:

net sam set workstations ""

The above appears to work but the entries are unchanged.

The entries can be edited but one can no longer remove all entries.

Very problematic since Powershell cannot be used for editing hundreds of users because Samba4 does not support web services.