samba - Apr 2001 - Map UNIX User to NT Administrator user

Hi all,

I've set up our samba server to be domain logon server for a bunch of 
Win NT 4 and Win 98 workstations.

I was wondering whether I should be able to log in as admin (an 
account I have set up) using the domain logon and have administrator 
privileges on the workstation.

I have the following in my [global] section of smb.conf

username map = /etc/samba/domainuser.map

and

/etc/samba/domainuser.map looks like this:

admin = Administrator
dan = Administrator


does this mean that I should be able to log in to a workstation as 
either admin or dan and have Administrator rights on it? That's the 
impression I got from the smb.conf man page and my SAMBA QUE book...

if I'm off track here can someone enlighten me as to how to get the 
SAMBA domain logon server to tell the NT workstation logging in that 
I should have full administrator rights?

TIA - dan.
-- 
Telezygology
Manager, Technical Systems
Ph (+61 2) 992 992 88    Fx (+61 2) 992 991 88

Hi, thanks for the ideas...

the "domain admin users" parameter sounds like it should work but
doesn't...

I tried

domain admin users = admin

in my global section of smb.conf and restarted, logged in again, and 
- no administrator rights :(

I see what you're saying about the user map and group map though - 
makes sense now that I've re-read the docs along with your 
explanation.

May be these features are not available as part of the standard 2.07 release?

Hmm... may be I need to hassle the NT-DOM list members some more for clues!

any one else got any ideas? does anyone have this working?

thanks, dan.

At 2:23 AM +0200 4/19/01, Markus Amersdorfer wrote:
>On Thu, 19 Apr 2001 08:48:56 +1000
>Dan Horth <d.horth@tzlimited.com> wrote:
>
>>  I have the following in my [global] section of smb.conf
>>   username map = /etc/samba/domainuser.map
>>
>>  /etc/samba/domainuser.map looks like this:
>>   admin = Administrator
>>   dan = Administrator
>
>man smb.conf:
>  For  example  to  map  from the name "admin" or
"administrator" to the
>  UNIX name "root" you would use:
>   root = admin administrator
>
>What you gain here is that the user logon names "admin" or
>"administrator" typed in at the Win-Logon-Prompt are mapped to the
>Unix-User "root".
>With
>  danny = "Dan Horth"
>you can log on to the Win-Client as "Dan Horth". The real
Unix-User,
>owner of the files etc. will be "danny".
>
>>  if I'm off track here can someone enlighten me as to how to get
the
>>  SAMBA domain logon server to tell the NT workstation logging in that
>>  I should have full administrator rights?
>
>Correct me if I'm wrong (I've never tried it myself), but I think
what
>you're searching is not the parameter "username map ..." but
>  domain admin user = admin
>or
>  domain admin group = @admins
>
>The Unix-user "admin" or all members of the group
"admins" will have
>Administrator-Rights on the NT-Client.
-- 
Telezygology
Manager, Technical Systems
Ph (+61 2) 992 992 88    Fx (+61 2) 992 991 88