samba - Apr 2006 - Domain admins and samba

How can I give a user account the ability to join or add computer to the 
domain?

Below are the steps I did but none work:

1.	Edit smb.conf file and add the following line.

#  domain administrators
    domain admin group = root user1 user2 @sysadmin
    domain admin users = @sysadmin

I have a group called "sysadmin" on my /etc/group profile and added
both
user1 and user2.

2.	Map the Windows Domain Admins to sysadmin group account using the 
command below:

pcname#net groupmap modify ntgroup="Domain Admins" unixgroup=sysadmin

3.	Check if the command was successful by using the command below:

pcname#net groupmap list

Domain Admins (S-1-5-21-1071463269-1754759636-1174686074-512) -> sysadmin

The above result clearly shows that it was successful and the "Domain 
Admins" group is pointing to "sysadmin".

Thanks for all the help.

-Ivan

On 4/21/06, Ivan Ordonez <iordonez@nature.berkeley.edu>
wrote:
> How can I give a user account the ability to join or add computer to the
> domain?
Are privileges enabled? ("enable privileges = yes" in smb.conf)

If not, then I believe that only root can join computers to the domain.

If privileges are enabled, then see Chapter 14 of the Samba
HOWTO-Collection for instructions on delegating privileges to your
Domain Admins group.

Josh Kelley

It works on mine, so the only other things I can think of are 1) is
'password server = pdc_server' in your smb.conf and/or 2) try adding
'-w
domainname' to the net rpc rights list command in addition to the -U
mentioned below.

Kirk
----- Original Message -----
From: "Ivan Ordonez" <iordonez@nature.berkeley.edu>
To: "Kirk B. Dice" <kirk@wadipetroleum.com>
Sent: Tuesday, April 25, 2006 5:30 PM
Subject: Re: [Samba] Domain admins and samba


Kirk,

I tried that and it did not work, I got the same message.

Thanks,
-Ivan

At 03:11 PM 4/25/2006, you wrote:
>Put the -U'username%pass' parm on the "net rpc rights
list" command.  The
>username and password should be the PDC's.
>
>Kirk
>
>----- Original Message -----
>From: "Ivan Ordonez" <iordonez@nature.berkeley.edu>
>To: "Asier Baranguan" <abaranguan@elpagestion.com>;
<samba@lists.samba.org>
>Sent: Tuesday, April 25, 2006 2:18 PM
>Subject: Re: [Samba] Domain admins and samba
>
>
>I could not use the command "net rpc rights list" as well.  I will
get a
>"Could not connect to server 127.0.0.1" message.  I can't use
"rpc" command
>at all.
>
>Can someone please point me to the right direction.
>
>Thanks,
>-Ivan
>
>At 02:13 PM 4/24/2006, Asier Baranguan wrote:
> >El Lunes, 24 de Abril de 2006 20:28, Ivan Ordonez escribi?:
> > > I added the line (enable privileges = yes) on my smb.conf, stop
and
>start
> > > samba service but still no luck.
> > >
> > > I still can't add a computer to the domain using regular
account that
>are
> > > part of "sysadmin" group.
> >
> >I think he refers to this link:
> >
>
>http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/NetCommand.html#
>id2567877
> >--
> >Asier.
> >--
> >To unsubscribe from this list go to the following URL and read the
> >instructions:  https://lists.samba.org/mailman/listinfo/samba
>
>
>--
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/listinfo/samba