samba - Dec 2003 - RedHat 9/PDC/LDAP/SAMBA3/W2k

Hy!

Ola!  I am following step by step of the manual (doc) that the colleague
ordered below in the cited email.  I am configuring the part ' Group
mappings ', and when I write the command:

    net groupmap add rid=512 ntgroup="Domain Admins"
unixgroup="Domain
Admins"

The following error occurs:

    Can?t lookup UNIX group domain Admins

What it can be this?

Grateful for the aid.
Yours truly,
Fabio Jr.

> ----- Original Message ----- 
> From: "Carl J. Hilinski" <CHilinski@timespapers.com>
> To: <samba@lists.samba.org>
> Sent: Wednesday, November 26, 2003 2:52 PM
> Subject: [Samba] PDC/LDAP/SAMBA3/NT4/winbind/trusted domains corrections
>
>
> > If you wanted to follow my steps for setting up a samba PDC in a
trusted
> > domain with NT4, please note that there are some corrections. I had a
> > second person follow my steps and we found some problems.
> >
> > First, the link I originally posted as incomplete. It needs a slash at
> > the end. The correct link is:
> >
> > http://www.hilinski.net/samba/
> >
> > The doc file posted there was corrected today, 11/26/2003 at 11:30
a.m.
> > est.
> >
> > I have some questions while I am posting.
> >
> > #1. If you use winbind, is there any reason to put the add machine,
add
> > user, etc., scripts in smb.conf? It seems winbind doesn't bother
with
> > these.
> >
> > #2. Along the same lines, if you use winbind is there any reason to do
> > the group mapping between nt groups and unix groups?
> >
> > #3. According to the docs, "winbind gid" is supposed to be a
synonym for
> > "idmap ." I don't think that works in the latest
prerelease code.
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> >
>

Have you set up a unix group? something like

# groupadd ntadmin
# net groupmap modify ntgroup="Domain Admins" unixgroup=ntadmin

should do the trick

(then usermod -G ntadmin <admin user>)

edd

On Friday 05 Dec 2003 8:22 pm, Fabio Junior wrote:
> Hy!
>
> Ola!  I am following step by step of the manual (doc) that the colleague
> ordered below in the cited email.  I am configuring the part ' Group
> mappings ', and when I write the command:
>
>     net groupmap add rid=512 ntgroup="Domain Admins"
unixgroup="Domain
> Admins"
>
> The following error occurs:
>
>     Can?t lookup UNIX group domain Admins
>
> What it can be this?
>
> Grateful for the aid.
> Yours truly,
> Fabio Jr.
>
> > ----- Original Message -----
> > From: "Carl J. Hilinski" <CHilinski@timespapers.com>
> > To: <samba@lists.samba.org>
> > Sent: Wednesday, November 26, 2003 2:52 PM
> > Subject: [Samba] PDC/LDAP/SAMBA3/NT4/winbind/trusted domains
corrections
> >
> > > If you wanted to follow my steps for setting up a samba PDC in a
> > > trusted domain with NT4, please note that there are some
corrections. I
> > > had a second person follow my steps and we found some problems.
> > >
> > > First, the link I originally posted as incomplete. It needs a
slash at
> > > the end. The correct link is:
> > >
> > > http://www.hilinski.net/samba/
> > >
> > > The doc file posted there was corrected today, 11/26/2003 at
11:30 a.m.
> > > est.
> > >
> > > I have some questions while I am posting.
> > >
> > > #1. If you use winbind, is there any reason to put the add
machine, add
> > > user, etc., scripts in smb.conf? It seems winbind doesn't
bother with
> > > these.
> > >
> > > #2. Along the same lines, if you use winbind is there any reason
to do
> > > the group mapping between nt groups and unix groups?
> > >
> > > #3. According to the docs, "winbind gid" is supposed to
be a synonym
> > > for "idmap ." I don't think that works in the
latest prerelease code.
> > > --
> > > To unsubscribe from this list go to the following URL and read
the
> > > instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
Edd Payne
IT Co-ordinator
University of London Union
Malet Street, London WC1E 7HY

tel: 020 7664 2060
fax: 020 7436 4604