Tranquil IT Forum

Hello,

I've set up a SAMBA 4 AD server (Version 14.4), and everything is working correctly. I'm managing the SAMBA server with a second Windows server for the RSAT tools. All users connected to the SAMBA domain use macOS machines. I'd like to know if it's possible to provide a web interface (preferably) to delegate rights to certain users so they can manage their own user groups? (Primarily adding/deleting accounts).

Sincerely,
Molketer

Hello Molketer,

to my knowledge there isn't a reliable open-source web interface. You'll have to look at proprietary IAM tools. That said, a Windows VM with RSAT (a Windows 10 machine works perfectly) works very well, as does RDP from a macOS machine.

Regards,

Denis

Hello Dcardon,

A Windows VM wouldn't be intuitive enough and would be complex to set up for macOS users. I'll look into IAM.

Regards

I found this on your site:
https://dev.tranquil.it/samba/en/doc/sa ... samdb.html

Perhaps there's a way to create a small website with a Python backend?

Regards,
Molketer

If you have developer time to dedicate to it... yes, all the APIs are readily available and accessible from Python 3 scripts. It's convenient for scripting LDAP to AD synchronization or vice versa, but if you want to write a complete management interface, it will still require a significant amount of resources.