hello i cant manage groups with usrmgr and the configuration below debian sarge, samba 3.0.22, openldap 2.2.23, smbldap-tools 0.8.7. usrmgr reports he cant find the groups. is it solved by samba 3.0.23a ? does anybody report enhancement after upgrading to 3.0.23a ? Regards ELH -- ?ric LE H?NAFF ?cole normale sup?rieure - Centre de ressources informatiques Informaticien, Ing?nieur d?veloppements et syst?mes aupr?s des biblioth?ques de l'ENS Pr?f?rez firefox! http://www.mozilla-europe.org/fr/ SVP, ?vitez de m'envoyer des attachements au format Word, Excel ou PowerPoint. Pr?f?rez les formats rtf, csv, html ou pdf au lieu des formats word et excel. Voir http://www.gnu.org/philosophy/no-word-attachments.fr.html pour plus d'explications.
Hi, got the same problem, and there is a "mysterious" group "Users", the usermanager doesn't start, it says "The specified local group does not exist". net groupmap list | tail: IZ ICT (S-1-5-21-2651798370-710026074-3531216960-3179) -> IZ ICT IZ PZ (S-1-5-21-2651798370-710026074-3531216960-3181) -> IZ PZ Users (S-1-5-32-545) -> 10004 When I look in the ldap database, I see that the group Users is there, but with dn: sambaSID=S-1-5-32-545,ou=Groups... All the other groups have cn=Groupname in their dn. And now for the strange thing, when I delete the group "Users" form ldap, it is automatically re-created, and adding a group "Users" in the normal way, with groupmapping doesn't prevent it from being created. Which proces creates this group? And why, how? when? Does this cause the nt4 usermanager problem? Cheers, Jeroen. On Mon, 24 Jul 2006 11:55:26 +0200 ?ric le h?naff <eric.le.henaff@ens.fr> wrote:> hello > i cant manage groups with usrmgr and the configuration below > debian sarge, samba 3.0.22, openldap 2.2.23, smbldap-tools 0.8.7. > usrmgr reports he cant find the groups. > is it solved by samba 3.0.23a ? does anybody report enhancement after > upgrading to 3.0.23a ? > Regards > ELH > > -- > ?ric LE H?NAFF > ?cole normale sup?rieure - Centre de ressources informatiques > Informaticien, Ing?nieur d?veloppements et syst?mes aupr?s des biblioth?ques de l'ENS > > Pr?f?rez firefox! http://www.mozilla-europe.org/fr/ > > SVP, ?vitez de m'envoyer des attachements au format Word, Excel ou PowerPoint. > Pr?f?rez les formats rtf, csv, html ou pdf au lieu des formats word et excel. > Voir http://www.gnu.org/philosophy/no-word-attachments.fr.html pour plus > d'explications. > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba
could this problem comes of the migrated accounts i 'net rpc vampired' from our future ex NT4 domain server ? ELH -------- Message original -------- Sujet: USRMGR and 3.0.23a Date: Mon, 24 Jul 2006 11:55:26 +0200 De: ?ric le h?naff <eric.le.henaff@ens.fr> Forums de discussion: gmane.network.samba.general hello i cant manage groups with usrmgr and the configuration below debian sarge, samba 3.0.22, openldap 2.2.23, smbldap-tools 0.8.7. usrmgr reports he cant find the groups. is it solved by samba 3.0.23a ? does anybody report enhancement after upgrading to 3.0.23a ? Regards ELH -- ?ric LE H?NAFF ?cole normale sup?rieure - Centre de ressources informatiques Informaticien, Ing?nieur d?veloppements et syst?mes aupr?s des biblioth?ques de l'ENS Pr?f?rez firefox! http://www.mozilla-europe.org/fr/ SVP, ?vitez de m'envoyer des attachements au format Word, Excel ou PowerPoint. Pr?f?rez les formats rtf, csv, html ou pdf au lieu des formats word et excel. Voir http://www.gnu.org/philosophy/no-word-attachments.fr.html pour plus d'explications. -- ?ric LE H?NAFF ?cole normale sup?rieure - Centre de ressources informatiques Informaticien, Ing?nieur d?veloppements et syst?mes aupr?s des biblioth?ques de l'ENS Pr?f?rez firefox! http://www.mozilla-europe.org/fr/ SVP, ?vitez de m'envoyer des attachements au format Word, Excel ou PowerPoint. Pr?f?rez les formats rtf, csv, html ou pdf au lieu des formats word et excel. Voir http://www.gnu.org/philosophy/no-word-attachments.fr.html pour plus d'explications.
I still have the problem with domain groups in 3.0.23a with the patch listed on the website applied. The 'net rpc info' command shows(still): Domain Name: MATH_CS Domain SID: S-1-5-21-1882045844-2771900506-1057560041 Sequence number: 1153750888 Num users: 5 Num domain groups: 0 Num local groups: 0 -James>>> "Gerald (Jerry) Carter" <jerry@samba.org> 07/24/06 8:02 AM >>>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Gerald (Jerry) Carter wrote:> No. But I have reproduced the error you reported though. > I expect it is specific to ldapsam. Attached is a patch. > For what it's worth, I have no problem running usrmgr.exe > with the one exception noted.I've posted a more complete patch to http://www.samba.org/samba/patches/ There was a problem manipulating local group membership as well as viewing it. cheers, jerry ====================================================================Samba ------- http://www.samba.org Centeris ----------- http://www.centeris.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFExLbLIR7qMdg1EfYRAhcGAJ9ORybTX0E6YBBljtFSl/49IpLBBACgsdJB THxJt+O6XQ+Lo8SNVvmjYIU=LS65 -----END PGP SIGNATURE----- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Here's the output from 'net groupmap list verbose':
Domain Admins
SID : S-1-5-21-1882045844-2771900506-1057560041-512
Unix gid : 512
Unix group: Domain Admins
Group type: Domain Group
Comment : Netbios Domain Administrators
Domain Users
SID : S-1-5-21-1882045844-2771900506-1057560041-513
Unix gid : 513
Unix group: Domain Users
Group type: Domain Group
Comment : Netbios Domain Users
Domain Guests
SID : S-1-5-21-1882045844-2771900506-1057560041-514
Unix gid : 514
Unix group: Domain Guests
Group type: Domain Group
Comment : Netbios Domain Guests Users
Domain Computers
SID : S-1-5-21-1882045844-2771900506-1057560041-515
Unix gid : 515
Unix group: Domain Computers
Group type: Domain Group
Comment : Netbios Domain Computers accounts
Administrators
SID : S-1-5-32-544
Unix gid : 544
Unix group: Administrators
Group type: Well-known Group
Comment : Netbios Domain Members can fully administer the
computer/sambaDomainName
Account Operators
SID : S-1-5-32-548
Unix gid : 548
Unix group: Account Operators
Group type: Well-known Group
Comment : Netbios Domain Users to manipulate users accounts
Print Operators
SID : S-1-5-32-550
Unix gid : 550
Unix group: Print Operators
Group type: Well-known Group
Comment : Netbios Domain Print Operators
Backup Operators
SID : S-1-5-32-551
Unix gid : 551
Unix group: Backup Operators
Group type: Well-known Group
Comment : Netbios Domain Members can bypass file security to back up
files
Replicators
SID : S-1-5-32-552
Unix gid : 552
Unix group: Replicators
Group type: Well-known Group
Comment : Netbios Domain Supports file replication in a
sambaDomainName
faculty
SID : S-1-5-21-1882045844-2771900506-1057560041-5001
Unix gid : 2000
Unix group: faculty
Group type: Domain Group
Comment :
students
SID : S-1-5-21-1882045844-2771900506-1057560041-3001
Unix gid : 1000
Unix group: students
Group type: Domain Group
Comment :
Unless I'm missing something stupid, I thought this looked correct.
-James
>>> "Gerald (Jerry) Carter" <jerry@samba.org> 07/24/06
10:57 AM >>>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
James Money wrote:> I still have the problem with domain groups in 3.0.23a with the patch
listed on the website applied. The 'net rpc info' command shows(still):
>
> Domain Name: MATH_CS
> Domain SID: S-1-5-21-1882045844-2771900506-1057560041
> Sequence number: 1153750888
> Num users: 5
> Num domain groups: 0
> Num local groups: 0
Remind me what the output of 'net groupmap list verbose' is ?
cheers, jerry
====================================================================Samba
------- http://www.samba.org
Centeris ----------- http://www.centeris.com
"What man is a man who does not make the world better?" --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org
iD8DBQFExN/bIR7qMdg1EfYRAh6mAJ92nMBuxaIEW4RYF7uR4v0R+ycfwgCglt1M
T1lSvTTXOz9us43xSGFWeCQ=yY7M
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 James Money wrote:> I added the new index, but not the new schema. I > just added that it appears to be working fine > now. Thanks!Great! Thanks for the feedback. cheers, jerry ====================================================================Samba ------- http://www.samba.org Centeris ----------- http://www.centeris.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFExOfvIR7qMdg1EfYRAkr/AJ4oAcIs3gJhQLACH1ePfbiGXZUT8wCgnE+Z KCDyFt4cq7BKeUp6Qfg3P4w=6fWX -----END PGP SIGNATURE-----