</variablelist>
</refsect3>
-<refsect2>
- <title>service-account</title>
- <para>Service account management.</para>
-</refsect2>
-
-<refsect3>
- <title>service-account list</title>
- <para>List service accounts on the domain.</para>
- <variablelist>
- <varlistentry>
- <term>-H, --URL</term>
- <listitem><para>
- LDB URL for database or target server.
- </para></listitem>
- </varlistentry>
- <varlistentry>
- <term>--json</term>
- <listitem><para>
- View service accounts as JSON instead of a list.
- </para></listitem>
- </varlistentry>
- </variablelist>
-</refsect3>
-
-<refsect3>
- <title>service-account view</title>
- <para>View a single service account on the domain.</para>
- <variablelist>
- <varlistentry>
- <term>-H, --URL</term>
- <listitem><para>
- LDB URL for database or target server.
- </para></listitem>
- </varlistentry>
- <varlistentry>
- <term>--name</term>
- <listitem><para>
- Account name of service account to view (required).
- </para></listitem>
- </varlistentry>
- </variablelist>
-</refsect3>
-
-<refsect3>
- <title>service-account create</title>
- <para>Create a new service account on the domain.</para>
- <variablelist>
- <varlistentry>
- <term>-H, --URL</term>
- <listitem><para>
- LDB URL for database or target server.
- </para></listitem>
- </varlistentry>
- <varlistentry>
- <term>--name</term>
- <listitem><para>
- Account name of service account (required).
- </para></listitem>
- </varlistentry>
- <varlistentry>
- <term>--dns-host-name</term>
- <listitem><para>
- DNS hostname of this service account (required).
- </para></listitem>
- </varlistentry>
- <varlistentry>
- <term>--group-msa-membership</term>
- <listitem><para>
- Optional Group MSA Membership SDDL.
- </para></listitem>
- </varlistentry>
- <varlistentry>
- <term>--managed-password-interval</term>
- <listitem><para>
- Managed password refresh interval in days.
- </para></listitem>
- </varlistentry>
- </variablelist>
-</refsect3>
-
-<refsect3>
- <title>service-account modify</title>
- <para>Modify an existing service account on the domain.</para>
- <variablelist>
- <varlistentry>
- <term>-H, --URL</term>
- <listitem><para>
- LDB URL for database or target server.
- </para></listitem>
- </varlistentry>
- <varlistentry>
- <term>--name</term>
- <listitem><para>
- Account name of service account (required).
- </para></listitem>
- </varlistentry>
- <varlistentry>
- <term>--dns-host-name</term>
- <listitem><para>
- Update DNS hostname of this service account.
- </para></listitem>
- </varlistentry>
- <varlistentry>
- <term>--group-msa-membership</term>
- <listitem><para>
- Update Group MSA Membership SDDL.
- </para></listitem>
- </varlistentry>
- </variablelist>
-</refsect3>
-
-<refsect3>
- <title>service-account delete</title>
- <para>Delete a service accounts on the domain.</para>
- <variablelist>
- <varlistentry>
- <term>-H, --URL</term>
- <listitem><para>
- LDB URL for database or target server.
- </para></listitem>
- </varlistentry>
- <varlistentry>
- <term>--name</term>
- <listitem><para>
- Account name of service account to delete.
- </para></listitem>
- </varlistentry>
- </variablelist>
-</refsect3>
-
-<refsect2>
- <title>service-account group-msa-membership</title>
- <para>Service account Group MSA Membership management.</para>
-</refsect2>
-
-<refsect3>
- <title>service-account group-msa-membership show</title>
- <para>Display Group MSA Membership for a service account.</para>
- <variablelist>
- <varlistentry>
- <term>-H, --URL</term>
- <listitem><para>
- LDB URL for database or target server.
- </para></listitem>
- </varlistentry>
- <varlistentry>
- <term>--name</term>
- <listitem><para>
- Account name of service account (required).
- </para></listitem>
- </varlistentry>
- <varlistentry>
- <term>--json</term>
- <listitem><para>
- Return as JSON instead of a list.
- </para></listitem>
- </varlistentry>
- </variablelist>
-</refsect3>
-
-<refsect3>
- <title>service-account group-msa-membership add</title>
- <para>Add a principal to Group MSA Membership for a service account.</para>
- <variablelist>
- <varlistentry>
- <term>-H, --URL</term>
- <listitem><para>
- LDB URL for database or target server.
- </para></listitem>
- </varlistentry>
- <varlistentry>
- <term>--name</term>
- <listitem><para>
- Account name of service account (required).
- </para></listitem>
- </varlistentry>
- <varlistentry>
- <term>--principal</term>
- <listitem><para>
- Name, DN or SID of principal to add.
- </para></listitem>
- </varlistentry>
- </variablelist>
-</refsect3>
-
-<refsect3>
- <title>service-account group-msa-membership remove</title>
- <para>Remove a principal from Group MSA Membership for a service account.</para>
- <variablelist>
- <varlistentry>
- <term>-H, --URL</term>
- <listitem><para>
- LDB URL for database or target server.
- </para></listitem>
- </varlistentry>
- <varlistentry>
- <term>--name</term>
- <listitem><para>
- Account name of service account (required).
- </para></listitem>
- </varlistentry>
- <varlistentry>
- <term>--principal</term>
- <listitem><para>
- Name, DN or SID of principal to remove.
- </para></listitem>
- </varlistentry>
- </variablelist>
-</refsect3>
-
<refsect3>
<title>domain classicupgrade [options] <replaceable>classic_smb_conf</replaceable></title>
<para>Upgrade from Samba classic (NT4-like) database to Samba AD DC
<para>Display an objectclass schema definition.</para>
</refsect3>
+<refsect2>
+ <title>service-account</title>
+ <para>Service account management.</para>
+</refsect2>
+
+<refsect3>
+ <title>service-account list</title>
+ <para>List service accounts on the domain.</para>
+ <variablelist>
+ <varlistentry>
+ <term>-H, --URL</term>
+ <listitem><para>
+ LDB URL for database or target server.
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>--json</term>
+ <listitem><para>
+ View service accounts as JSON instead of a list.
+ </para></listitem>
+ </varlistentry>
+ </variablelist>
+</refsect3>
+
+<refsect3>
+ <title>service-account view</title>
+ <para>View a single service account on the domain.</para>
+ <variablelist>
+ <varlistentry>
+ <term>-H, --URL</term>
+ <listitem><para>
+ LDB URL for database or target server.
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>--name</term>
+ <listitem><para>
+ Account name of service account to view (required).
+ </para></listitem>
+ </varlistentry>
+ </variablelist>
+</refsect3>
+
+<refsect3>
+ <title>service-account create</title>
+ <para>Create a new service account on the domain.</para>
+ <variablelist>
+ <varlistentry>
+ <term>-H, --URL</term>
+ <listitem><para>
+ LDB URL for database or target server.
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>--name</term>
+ <listitem><para>
+ Account name of service account (required).
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>--dns-host-name</term>
+ <listitem><para>
+ DNS hostname of this service account (required).
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>--group-msa-membership</term>
+ <listitem><para>
+ Optional Group MSA Membership SDDL.
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>--managed-password-interval</term>
+ <listitem><para>
+ Managed password refresh interval in days.
+ </para></listitem>
+ </varlistentry>
+ </variablelist>
+</refsect3>
+
+<refsect3>
+ <title>service-account modify</title>
+ <para>Modify an existing service account on the domain.</para>
+ <variablelist>
+ <varlistentry>
+ <term>-H, --URL</term>
+ <listitem><para>
+ LDB URL for database or target server.
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>--name</term>
+ <listitem><para>
+ Account name of service account (required).
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>--dns-host-name</term>
+ <listitem><para>
+ Update DNS hostname of this service account.
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>--group-msa-membership</term>
+ <listitem><para>
+ Update Group MSA Membership SDDL.
+ </para></listitem>
+ </varlistentry>
+ </variablelist>
+</refsect3>
+
+<refsect3>
+ <title>service-account delete</title>
+ <para>Delete a service accounts on the domain.</para>
+ <variablelist>
+ <varlistentry>
+ <term>-H, --URL</term>
+ <listitem><para>
+ LDB URL for database or target server.
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>--name</term>
+ <listitem><para>
+ Account name of service account to delete.
+ </para></listitem>
+ </varlistentry>
+ </variablelist>
+</refsect3>
+
+<refsect2>
+ <title>service-account group-msa-membership</title>
+ <para>Service account Group MSA Membership management.</para>
+</refsect2>
+
+<refsect3>
+ <title>service-account group-msa-membership show</title>
+ <para>Display Group MSA Membership for a service account.</para>
+ <variablelist>
+ <varlistentry>
+ <term>-H, --URL</term>
+ <listitem><para>
+ LDB URL for database or target server.
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>--name</term>
+ <listitem><para>
+ Account name of service account (required).
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>--json</term>
+ <listitem><para>
+ Return as JSON instead of a list.
+ </para></listitem>
+ </varlistentry>
+ </variablelist>
+</refsect3>
+
+<refsect3>
+ <title>service-account group-msa-membership add</title>
+ <para>Add a principal to Group MSA Membership for a service account.</para>
+ <variablelist>
+ <varlistentry>
+ <term>-H, --URL</term>
+ <listitem><para>
+ LDB URL for database or target server.
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>--name</term>
+ <listitem><para>
+ Account name of service account (required).
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>--principal</term>
+ <listitem><para>
+ Name, DN or SID of principal to add.
+ </para></listitem>
+ </varlistentry>
+ </variablelist>
+</refsect3>
+
+<refsect3>
+ <title>service-account group-msa-membership remove</title>
+ <para>Remove a principal from Group MSA Membership for a service account.</para>
+ <variablelist>
+ <varlistentry>
+ <term>-H, --URL</term>
+ <listitem><para>
+ LDB URL for database or target server.
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>--name</term>
+ <listitem><para>
+ Account name of service account (required).
+ </para></listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>--principal</term>
+ <listitem><para>
+ Name, DN or SID of principal to remove.
+ </para></listitem>
+ </varlistentry>
+ </variablelist>
+</refsect3>
+
<refsect2>
<title>shell</title>
<para>Opens an interactive Samba Python shell.</para>