samba - Jul 2006 - mapping well known groups problem (net groupmap)

Hi

I have samba 3.0.14a (debian/stable) and wonder where the problem is 
that running this command:

# net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=512
type=d
gives:
adding entry for group Domain Admins failed!

but (note changed rid)

# net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=1000
type=d
works fine.

Hm, winbind is not working, but I suppose it is not needed here.

So what is the problem with mapping?

Regards
Piotr L.

Hi Piotr

I had all these problems too... and posted here, but no solution.  The only 
solution I found was to delete the group/user entirely, and specify the RID 
at the same time as you create the group/user.  It's ok then.  However, once
I had the error (although the RID changed), I had a corrupt entry in 
passsb.tdb which required me to erase it and start again.

If you find a proper solution I would love to know!

Steve :)
-- 



Piotr Legiecki wrote:
> Hi
>
> I have samba 3.0.14a (debian/stable) and wonder where the problem is
> that running this command:
>
> # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins
rid=512
> type=d
> gives:
> adding entry for group Domain Admins failed!
>
> but (note changed rid)
>
> # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins
rid=1000
> type=d
> works fine.
>
> Hm, winbind is not working, but I suppose it is not needed here.
>
> So what is the problem with mapping?
>
> Regards
> Piotr L.

"Piotr Legiecki" <piotrlg@sci.pam.szczecin.pl> wrote in message
news:44B5F3C8.7070009@sci.pam.szczecin.pl...
> Hi
>
> I have samba 3.0.14a (debian/stable) and wonder where the problem is
> that running this command:
>
> # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins
rid=512
> type=d
> gives:
> adding entry for group Domain Admins failed!
>
> but (note changed rid)
>
> # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins
rid=1000
> type=d
> works fine.
>
> Hm, winbind is not working, but I suppose it is not needed here.
>
> So what is the problem with mapping?
You have the option of using the Windows NT tool User Manager for Domains to
manage your users and groups.  You will need to set up your add user and add
group scripts in the smb.conf file.

You can find the tool here  http://support.microsoft.com/kb/173673/

Put User Manager for Domains on a Samba share and run it from a workstation.

I have never used the mapping command.