samba - Mar 2004 - domain admins and Samba 3.0.2

Hi

I've been running Samba 2.x for years but decided to move up to 3.0.2.
I've set
up a new samba server with a workgroup NEWBIOSS and netbios name PARETO.
Im having problems setting up my domain admins.
I used
'net groupmap modify "Domain Admins" unixgroup=domadmin'

my 'net groupmap list' shows :
System Operators (S-1-5-32-549) -> -1
Replicators (S-1-5-32-552) -> -1
Guests (S-1-5-32-546) -> -1
Domain Users (S-1-5-21-1375496003-1846269575-2512961765-513) -> -1
Power Users (S-1-5-32-547) -> -1
Print Operators (S-1-5-32-550) -> -1
Administrators (S-1-5-32-544) -> -1
Account Operators (S-1-5-32-548) -> -1
Domain Admins (S-1-5-21-1375496003-1846269575-2512961765-512) -> domadmin
Backup Operators (S-1-5-32-551) -> -1
Domain Guests (S-1-5-21-1375496003-1846269575-2512961765-514) -> -1
Users (S-1-5-32-545) -> -1

net getlocalsid
SID for domain PARETO is: S-1-5-21-1375496003-1846269575-2512961765

ypcat group |grep domadmin
domadmin:*:60:janet,myles,alec

user janet is in group 60

On the PC (Win 2K) it says :
You are logged in as NEWBIOSS\janet, which is not a member of the Administrators
group

But when I check under 'Local Users and Groups' Administrator
properties, it
includes
NEWBIOSS\Domain Admins(S-1-5-21-1375496003-184...

I've checked out the thread about domain admins in January, but cannot see
where
I'm going wrong. I've been running samba 2.2.5 with
'domain admin group = root @domadmin' in smb.conf for ages with no
problems

Can anyone help ?

I have a huge level 3 debug if anyone can understand it.

	Janet

*************************************************************************
Janet Dickson                        | http://www.bioss.ac.uk/~janet
Biomathematics & Statistics Scotland | email: janet@bioss.ac.uk
The King's Buildings, Mayfield Rd    | Telephone: +44 (0) 131 650 4888
Edinburgh EH9 3JZ, Scotland, UK.     | Fax: +44 (0) 131 650 4901
*************************************************************************

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Janet Dickson ?rta:

| Hi
|
| I've been running Samba 2.x for years but decided to move up to 3.0.2.
| I've set up a new samba server with a workgroup NEWBIOSS and netbios
| name PARETO.
| Im having problems setting up my domain admins.
| I used
| 'net groupmap modify "Domain Admins" unixgroup=domadmin'
|
| my 'net groupmap list' shows :
| System Operators (S-1-5-32-549) -> -1
| Replicators (S-1-5-32-552) -> -1
| Guests (S-1-5-32-546) -> -1
| Domain Users (S-1-5-21-1375496003-1846269575-2512961765-513) -> -1
| Power Users (S-1-5-32-547) -> -1
| Print Operators (S-1-5-32-550) -> -1
| Administrators (S-1-5-32-544) -> -1
| Account Operators (S-1-5-32-548) -> -1
| Domain Admins (S-1-5-21-1375496003-1846269575-2512961765-512) -> domadmin
| Backup Operators (S-1-5-32-551) -> -1
| Domain Guests (S-1-5-21-1375496003-1846269575-2512961765-514) -> -1
| Users (S-1-5-32-545) -> -1
|
| net getlocalsid
| SID for domain PARETO is: S-1-5-21-1375496003-1846269575-2512961765
|
| ypcat group |grep domadmin
| domadmin:*:60:janet,myles,alec
|
| user janet is in group 60
|
| On the PC (Win 2K) it says :
| You are logged in as NEWBIOSS\janet, which is not a member of the
| Administrators group
|
| But when I check under 'Local Users and Groups' Administrator
| properties, it includes
| NEWBIOSS\Domain Admins(S-1-5-21-1375496003-184...
|
| I've checked out the thread about domain admins in January, but cannot
| see where I'm going wrong. I've been running samba 2.2.5 with
| 'domain admin group = root @domadmin' in smb.conf for ages with no
problems
|
| Can anyone help ?
|
| I have a huge level 3 debug if anyone can understand it.
|
|     Janet

Hi,

You haven't mapped your Domain Users, and Domain Guests group, which
could confuse your Windows clients

Cheers,

Geza
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFAYuIJ/PxuIn+i1pIRAgnCAJ9cm0CuBc0GHerpjvp0irmBDXZ5LQCfbD16
EfkZ8X03A37HlllhxYwoZFg=GhLG
-----END PGP SIGNATURE-----