Piotr Legiecki
2006-Jul-13 07:45 UTC
[Samba] mapping well known groups problem (net groupmap)
Hi I have samba 3.0.14a (debian/stable) and wonder where the problem is that running this command: # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=512 type=d gives: adding entry for group Domain Admins failed! but (note changed rid) # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=1000 type=d works fine. Hm, winbind is not working, but I suppose it is not needed here. So what is the problem with mapping? Regards Piotr L.
Steve A
2006-Jul-13 09:54 UTC
[Samba] Re: mapping well known groups problem (net groupmap)
Hi Piotr I had all these problems too... and posted here, but no solution. The only solution I found was to delete the group/user entirely, and specify the RID at the same time as you create the group/user. It's ok then. However, once I had the error (although the RID changed), I had a corrupt entry in passsb.tdb which required me to erase it and start again. If you find a proper solution I would love to know! Steve :) -- Piotr Legiecki wrote:> Hi > > I have samba 3.0.14a (debian/stable) and wonder where the problem is > that running this command: > > # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=512 > type=d > gives: > adding entry for group Domain Admins failed! > > but (note changed rid) > > # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=1000 > type=d > works fine. > > Hm, winbind is not working, but I suppose it is not needed here. > > So what is the problem with mapping? > > Regards > Piotr L.
Jamrock
2006-Jul-13 12:06 UTC
[Samba] Re: mapping well known groups problem (net groupmap)
"Piotr Legiecki" <piotrlg@sci.pam.szczecin.pl> wrote in message news:44B5F3C8.7070009@sci.pam.szczecin.pl...> Hi > > I have samba 3.0.14a (debian/stable) and wonder where the problem is > that running this command: > > # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=512 > type=d > gives: > adding entry for group Domain Admins failed! > > but (note changed rid) > > # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=1000 > type=d > works fine. > > Hm, winbind is not working, but I suppose it is not needed here. > > So what is the problem with mapping?You have the option of using the Windows NT tool User Manager for Domains to manage your users and groups. You will need to set up your add user and add group scripts in the smb.conf file. You can find the tool here http://support.microsoft.com/kb/173673/ Put User Manager for Domains on a Samba share and run it from a workstation. I have never used the mapping command.