samba - Oct 2003 - problem with group mapping

Hi,
I use now samba3.0.1pre1 with ldapsam (OpenLDAP 2.1.23).
After I played with sambaGroupMapping I now get the error Message:
"Die angegebene Gruppe ist nicht vorhanden"
"The given group does not exist"
when I log in (administrator).
Admin's SID is: S-1-5-21-1091375802-1471697927-1951840895-500
Domain SID is: S-1-5-21-1091375802-1471697927-1951840895

The error occured after I created a administrators group in ldap with
(first free) gid 3019 and SID
S-1-5-21-1091375802-1471697927-1951840895-512
and added groupMapping to my "susers" (all samba users) with rid 513
and
created for testing a group guest with no memberUIDs and rid 514.
All groups had type 0 (zero).
I removed all those groups, but the error remains.
PDC and BDC have same Domain-SID.
What did I do wrong, or what ist the correct way to do this?
I especially don't know what to do with group "guest" - is this
nobody or
nogroup in unix?
I read across the documentation but didn't find someting helpfull or did I
read across some important points?

Thanks in advance for any help,
Malte M?ller

Hello everybody.

I'm getting the following warning message in smbd logs:

[2003/11/25 09:40:24, 0] rpc_server/srv_util.c:get_domain_user_groups(371)
  get_domain_user_groups: primary gid of user [testuser] is not a Domain
group !
  get_domain_user_groups: You should fix it, NT doesn't like that

I have read in the archives that a solution to this problem is performing a
group mapping through net groupmap, as follows:

net groupmap modify ntgroup="Domain Users" UNIXgroup=users

where 'users' is the gid of testuser. 

I have already done this, but I doesn't solves the problem.

Somebody knows what could be the cause and the solution? Any help is really
welcome.

Configuration details:

Samba version is 3.0.0, compiled with default options (./configure &&
make),
running as PDC.

smb.conf:

[global]
        workgroup = VNUML
        passdb backend = tdbsam
        security = user
        encrypt passwords = yes

        # PDC related configuration
        os level = 64
        domain master = yes
        local master = yes
        preferred master = yes
        domain logons = yes

        # Home accounts
        logon home = \\%L\%U
        logon drive = H:

        # Profiles
        logon path = \\server2\%U

        add machine script = /usr/sbin/useradd -g machines -c Machine -d
/dev/null -s /bin/false %u

[netlogon]
        path = /netlogon
        writable = no
        browsable = no
        guest ok = yes

[tmp]
        path="/tmp"
        comment = temporal files

[homes]
        guest ok = no
        read only = no


Group mapping:

server1:~# net groupmap list
System Operators (S-1-5-32-549) -> -1
Replicators (S-1-5-32-552) -> -1
Guests (S-1-5-32-546) -> -1
Domain Admins (S-1-5-21-3581523360-593265997-265186742-512) -> -1
Power Users (S-1-5-32-547) -> -1
Domain Users (S-1-5-21-3581523360-593265997-265186742-513) -> users
Print Operators (S-1-5-32-550) -> -1
Administrators (S-1-5-32-544) -> -1
Account Operators (S-1-5-32-548) -> -1
Domain Guests (S-1-5-21-3581523360-593265997-265186742-514) -> -1
Backup Operators (S-1-5-32-551) -> -1
Users (S-1-5-32-545) -> -1

Testuser account info:

server1:~# cat /etc/passwd | grep testuser
testuser:*:1000:100:testing:/home/testuser:/bin/false
server1:~# cat /etc/group | grep users
users:*:100:testuser

Thanks in advance!

-------
Ferm?n