samba - Nov 2003 - Groups problem

We would like to migrate grom Winnt 4.0 to Samba 3 with ldap support. We
have installed openldap on Rh 2.1 AS and created starting databases with
IDEALX.org scripts. Now i have added computer to domain no problems and
than I tried to migrate users and groups, but only user migrate but
there is a problem "  Primary group of Administrator has no mapping!"
(
this is error for every user).

Then I try to assign Unix group to nt group:

[root@kekec milos]# net groupmap modify ntgroup="Domain Admins"
unixgroup=root

NT Group Domain Admins doesn't exist in mapping DB

Or 

[root@kekec milos]# net groupmap modify ntgroup="Domain Admins"
unixgroup=root rid=512

Bad option: rid=512

 

Does any one have any idea what i'm doing wrong ????

 

Regards, Milos

 

 

[root@kekec milos]# net rpc vampire -S server -U Administrator

Fetching DOMAIN database

SAM_DELTA_DOMAIN_INFO not handled

Creating unix group: 'Domain Admins'

Creating unix group: 'Domain Users'

Creating unix group: 'Domain Guests'

Creating unix group: 'Uprava'

Creating unix group: 'Mail'

Creating unix group: 'Spin'

Creating unix group: 'MTS Trusted Impersonators'

Creating unix group: 'Birpis'

Creating unix group: 'Lirpis'

Creating account: Administrator

[2003/11/04 15:14:09, 0] utils/net_rpc_samsync.c:fetch_account_info(488)

  Primary group of Administrator has no mapping!

Creating account: Guest

[2003/11/04 15:14:09, 0] utils/net_rpc_samsync.c:fetch_account_info(488)

On Tue, 4 Nov 2003, Milos Webmail wrote:
> We would like to migrate grom Winnt 4.0 to Samba 3 with ldap support. We
> have installed openldap on Rh 2.1 AS and created starting databases with
> IDEALX.org scripts. Now i have added computer to domain no problems and
> than I tried to migrate users and groups, but only user migrate but
> there is a problem "  Primary group of Administrator has no
mapping!" (
> this is error for every user).
>
> Then I try to assign Unix group to nt group:
>
> [root@kekec milos]# net groupmap modify ntgroup="Domain Admins"
> unixgroup=root
>
> NT Group Domain Admins doesn't exist in mapping DB
That's correct. If you use "tdbsam" these are automatically
created. You
can then migrate them to LDAP using:

	pdbedit -i tdbsam -e ldapsam

If you go directly to LDAP you have to create all group entries yourself.
The right way to do that is:

	net groupmap add ntgroup="Domain Admins" unixgroup=root rid=512
>
> Or
>
> [root@kekec milos]# net groupmap modify ntgroup="Domain Admins"
> unixgroup=root rid=512
>
> Bad option: rid=512
Yes, correct. You can not modify something that does not exist. :)
>
> Does any one have any idea what i'm doing wrong ????

Did you check if ANY NT Group that has a space in the name created a UNIX
group account? You will most likely find it did not because the
"groupadd"
utility will not allow you to do that. :)

The work around is the script provided in the Samba-HOWTO-Collection.


- John T.
>
>
>
> Regards, Milos
>
>
>
>
>
> [root@kekec milos]# net rpc vampire -S server -U Administrator
>
> Fetching DOMAIN database
>
> SAM_DELTA_DOMAIN_INFO not handled
>
> Creating unix group: 'Domain Admins'
>
> Creating unix group: 'Domain Users'
>
> Creating unix group: 'Domain Guests'
>
> Creating unix group: 'Uprava'
>
> Creating unix group: 'Mail'
>
> Creating unix group: 'Spin'
>
> Creating unix group: 'MTS Trusted Impersonators'
>
> Creating unix group: 'Birpis'
>
> Creating unix group: 'Lirpis'
>
> Creating account: Administrator
>
> [2003/11/04 15:14:09, 0] utils/net_rpc_samsync.c:fetch_account_info(488)
>
>   Primary group of Administrator has no mapping!
>
> Creating account: Guest
>
> [2003/11/04 15:14:09, 0] utils/net_rpc_samsync.c:fetch_account_info(488)
>
>
-- 
John H Terpstra
Email: jht@samba.org