Louis-David Mitterrand
2002-Oct-13 16:18 UTC
[Samba] can't add "Domain Users" group to local "Power Users" group
Hi, If I need some "Domain Users" to have local "Power Users" privileges what is the best way? - convert the local Power Users group to a domain group on the PDC with "smbgroupedit -c<...> -td" Not really knowing the consequence of that change I refrained from doing it. It seems (from searching on Google) that "Power Users" is only a local group; would that simple step solve my problem? - add the "Domain Users" group to the local "Power Users" group on each client: this seems the recommended practice, however it doesn't work. When trying I get a msgbox with: "Information returned from the object picker for objet 'Domain Users' was incomplete. The object will no be processed." On the PDC log.smbd displays an ominous message: [2002/10/13 18:10:27, 2] passdb/pdb_ldap.c:ldapsam_search_one_user(431) ldapsam_search_one_user: searching for:[(&(uid=Domain Users)(objectclass=samba Account))] [2002/10/13 18:10:27, 2] rpc_server/srv_samr_nt.c:access_check_samr_object(94) _samr_open_group: ACCESS DENIED (requested: 0x0000004e) This is on debian unstable with samba 3.0 alpha and ldapsam. Cheers, -- THESEE: Je t'aimais ; et je sens que malgr? ton offense, Mes entrailles pour toi se troublent par avance. (Ph?dre, J-B Racine, acte 4, sc?ne 3)