Hi, I have problems with a Samba-PDC (2.2.3a) and nt/w2k-clients. To adjust local nt/w2k security i have to join some unix-pdc-groups to the local groups. But under nt/w2k and with rpcclient -c "enumdomgroups" server i see only "Domain Admins" and "Domain Users" and I am even not able to join these groups. Instead I see names like PDC\unix_group.2147483248, which seems to be the 32bit underflow of (201-1000)/2. What unix-groups (i.e. the gid) I have to create to have the equivalent "well known" NT-PDC-Groups/RID's(Domain Admins=200, Domain User=201, Domain Guests=202, Administrators=220 etc.) ? Just choosing the 32bit underflow as unix-gid sounds not very reasonable. Is it then possible to see all unix-groups, not only the NT-PDC-Groups? -- Georg
On Thu, 2002-05-02 at 08:09, Georg Lutz wrote:> Hi, > > I have problems with a Samba-PDC (2.2.3a) and nt/w2k-clients. > > To adjust local nt/w2k security i have to join some unix-pdc-groups to > the local groups.you need samba 3 for this brad
On 2002-05-02, Bradley W. Langhorst wrote:> On Thu, 2002-05-02 at 08:09, Georg Lutz wrote: > > Hi, > > > > I have problems with a Samba-PDC (2.2.3a) and nt/w2k-clients. > > > > To adjust local nt/w2k security i have to join some unix-pdc-groups to > > the local groups. > you need samba 3 for thisSo the statement on http://www.samba.org/development.html --- * Support for acting as a Windows NT 4.0 Domain Controller. The initial * release will mostly likely include the following features: Release 1: * User and group enumeration by domain member services such as * assigning users to NTFS ACLs and share permissions. * Support for the full range of user profile settings such as * valid logon hours, password expiration, profile location, home * directory, etc... --- is not valid? -- Georg