similar to: winbind: how to map Windows groups to existing unix groups; limit windows group to unix groups

Hi, Did you ever find out how to do this? Thanks, Noal

I have a unix group that owns some files on a share, and I'd like to set up a group mapping so that an Active directory group (with an exising mapping in winbind from earlier use) gets access to these files via a mapping. I've been fooling around with net groupmap add, and haven't been able to get this set up. The group Domain Users has an existing mapping to gid 10004, which winbind

Upgraded our Solaris 8 and 9 servers from 3.0.2a to 3.0.3. After upgrading any user that was in more than 16 Unix groups wasn't able to map any drives. I get this error in the log file: [2004/05/04 12:23:30, 0] auth/auth_util.c:get_user_groups(695) get_user_groups: failed to get the unix group list [2004/05/04 12:23:30, 0] auth/auth_sam.c:check_sam_security(260) check_sam_security:

Hello. After fresh install. Samba and ldap seems to run normally ( I can join win2k workstation to linux samba pdc ). Using yast I create a system group named domadmin But I am unable to map "Domain Admins" to domadmin I am unable to map "Domain Admins" to existing ntadmin group I am unable to mofify mapping "Domain Admins" to domadmin group Thank you for

Hi, all I've installed Version 3.5.10-0.109.el5_8 from the samba3x RPM for Win7 compatibility. We are predominately a Linux shop and have only a handful of Win7 (Pro/Ultimate) dual-boot workstations for running things like Photoshop, etc We run a fairly minimal LDAP backend for Linux auth/automount (no SASL backend) and have not implemented a full Samba schema - i am waiting to build an

1. Here's my case: [root@dsat ~]# net groupmap list [root@dsat ~]# net groupmap add rid=512 ntgroup="Domain Admins" unixgroup=domainadmins adding entry for group Domain Admins failed! 2. Here's samba log: [root@dsat ~]# tail /var/log/smbd.log [2006/10/10 08:51:23, 0] lib/smbldap.c:smbldap_connect_system(851) ldap_connect_system: Failed to retrieve password from secrets.tdb

I am running 3.0.10-1.4E on RHEL4. The machine is a ADS member server. I would like to statically map the ADS group "Domain Admins" to the built in "wheel" group so all members of "Domain Admins" are in the "wheel" group. I have looked at the username map option, but I don't want a group of users mapped to a UID (this would defeat what I am trying to

Hello all, I am attempting to setup a Samba 3.0.2a based PDC using OpenLDAP 2.2.6 for my user/group authentication backend. So far everything seems to be working properly, I can join the domain from a Win2k PC, login via an account created with smbldap-useradd.pl, map my home directory, run the proper login script, etc. However, with all of that working I'm still having difficulties getting

Hi All, I have already integrated my samba with the Active directory domain using winbind, but I am trying to do the following. I want to map a UNIX group "ccusers" to Active Directory group "NICE\ccusers". I need my AD users that don't have local accounts on my machine to be able to access directories owne by the UNIX group ccusers. It seems like it should be simple to

I am about 95% done setting up our new lab samba server (man does it feel great to be free of Windows Server!). But I have hit a bit of a snag when it comes to adding domain/unix groups to the local XP groups (e.g. Power Users and Debugger Users). I have done some searching on Google - there are lots of howtos but they all seem to involve LDAP. I also fiddled with the net groupmap command in Linux

Hello everyone! I've been testing the 3.0 beta 3 (I've just upgraded from 2.2.7), and made a PDC configuration with Windows XP Pro clients. Everything works fine, however, I'm fine tuning the NT and Unix group mapping; in particular, I want to map the Unix group 'users' to the NT group 'Power Users'. I've tried: net groupmap modify ntgroup="Power Users"

Hi All, I am using Samba 3.2.11 on sles 10. I have create a Unix group 'grp1' and mapped it to a ntgroup "Group One". Unix group 'grp1' has one user i.e 'usr1'. 'net groupmap' command show the mapping with correct SID and gid value. Please, have a look here. # cat /etc/group | grep grp1 grp1:!:12613:usr1,raj1,raj2 # # net groupmap list Group One

Typical Linux Distros add all sorts of Unix groups to users when it creates them, like cdrom, floppy, dialout, audio, etc... Logging in to the domain from Windows with an account that has such membership over on Linux... "ifmember.exe /list" shows all of those memberships. Why exactly? I would expect only the groups I did a "net groupmap" on would be considered by Samba.

Hello, We have some computers from a lab that the operating system is ubuntu and are in the domain. I need the "alunos" group to have permissions in the tty and dialout group, since they need to use some arduinos. I have tried the following: net groupmap add ntgroup=alunos sid=1121 type=domain unixgroup=tty net groupmap add ntgroup=alunos sid=1121 type=domain unixgroup=dialout But

Hi on FreeBSD it happens that without this patch the number of groups is limited to 32. Since we need a greater number of groups, we send this patch. Hope it is approved early. Bye diff -ruN /root/work/samba-3.2.8/source/lib/replace/system/passwd.h /usr/ports/net/samba32/work/samba-3.2.8/source/lib/replace/system/passwd.h --- /root/work/samba-3.2.8/source/lib/replace/system/passwd.h 2009-02-03

On our campus, we have an AD forest. Our particular department has a number of samba servers that authenticate to one tree of that AD forest. All of our users have accounts in LDAP for unix and AD for windows. We don't want/need winbind for authentication. However, we would like the ability of setting ACLs on the samba server from windows clients. So, I assume I need a mapping of unix

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I've currently login through ssh enabled to work over winbind. I can use domain logins successfully on the linux machine. Upon first login their home directory gets create and everything is fine. But the user is only a member of all windows groups, e.g. uid=10000(markus) gid=10000(Dom??nen-Benutzer)

Jeff, After ssh try to run: newgrp it and then sudo. See if it will work, then you'll have to figure out what's going on with the users groups membership. Regards, Matt ________________________________ From: Jeff Sadowski <jeff.sadowski at gmail.com> Sent: Wednesday, December 9, 2015 10:08 AM To: Mattias Zhabinskiy; samba Subject: Re: [Samba] Adding an AD group to

hi, i would like to allow access to specific samba shares, where the windows domain user is NOT authenticated against the share with it's username, but with a membership of a given windows-group. example: windows-domain user "test01" --> which is a member of windows domain group "smb_test01" --> which gets mapped to the unix-group "smb01" --> which is

Hello all, I could not find anything in the discussion groups or documentation about using LDAP and Unix group mappings. The documentation states that in order to map unix groups to samba groups, you need to use the net group add command. However, I have an ldap backend and all my groups, that I care about are in LDAP. So I have a group called mainwdev. dn: