Hi Everyone, I have a small project going on. I'm about to migrate Redhat 7.3 to Debian Etch (smbd version 3.0.23d-2+b1). I've already managed to migrate Redhat 7.3 to Debian Sarge (smbd version 3.0.14a-) without any bigger problems. However, when I migrate to Etch I face a small problem. The last thing I want to do before I start samba is to grant my linux/samba admin, NT 'Domain Admins' access. 'net groupmap list' does not show anything (as it does in smbd version 3.0.14a-). sweetums:/# net groupmap list sweetums:/# So I can't do 'net groupmap modify ntgroup="Domain Admins" unixgroup=admin' either because there are no such group. If I create one my self 'net groupmap add rid=1000 ntgroup="Domain Admins" unixgroup=admin' it still does not get administrator privileges in Windows 2000. Note that I have done exactly what I did in Sarge but it does not work in Etch. My superior want to run Etch so I have to keep that in mind. Any pointers would be great. Thanks
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Andr? Jee wrote:> So I can't do 'net groupmap modify ntgroup="Domain Admins" > unixgroup=admin' either because there are no such group. > If I create one my self 'net groupmap add rid=1000 ntgroup="Domain > Admins" unixgroup=admin' it still does not get administrator privileges > in Windows 2000.The domain admins group has a rid of 512. cheers, jerry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFisTJIR7qMdg1EfYRAiebAJ9xRFqflUQRK20KX1bf/WC9MWboegCg4ZW4 RrldutQQfx/zLEst2mTl3+o=2yeO -----END PGP SIGNATURE-----
Hello Andr?! Andr? Jee schrieb:> sweetums:/# net groupmap list > sweetums:/#That's definitely an error. Did you try testparm? If not, please do so and quote the output.> So I can't do 'net groupmap modify ntgroup="Domain Admins" > unixgroup=admin' either because there are no such group.That's obvious... Was Samba running when you ran "net groupmap list"? timbo
On Thursday 21 December 2006 08:37, Andr? Jee wrote:> Hi Everyone, > > I have a small project going on. I'm about to migrate Redhat 7.3 to > Debian Etch (smbd version 3.0.23d-2+b1). > I've already managed to migrate Redhat 7.3 to Debian Sarge (smbd version > 3.0.14a-) without any bigger problems. > > However, when I migrate to Etch I face a small problem. The last thing I > want to do before I start samba is to grant my linux/samba admin, > NT 'Domain Admins' access. 'net groupmap list' does not show anything > (as it does in smbd version 3.0.14a-).That behaviour was changed after 3.0.14a - you need to manually create the Windows groups. See the WHATSNEW.txt file in the Samba tarball. Also refer to: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf> sweetums:/# net groupmap list > sweetums:/# > > So I can't do 'net groupmap modify ntgroup="Domain Admins" > unixgroup=admin' either because there are no such group. > If I create one my self 'net groupmap add rid=1000 ntgroup="Domain > Admins" unixgroup=admin' it still does not get administrator privileges > in Windows 2000.net groupmap add ntgroup="Domain Admins" unixgroup=admin type=d rid=512> Note that I have done exactly what I did in Sarge but it does not work > in Etch.The RID determines the privilege level in Windows.> My superior want to run Etch so I have to keep that in mind. > > Any pointers would be great.Read the documentation - it is available on the Samba web site to help our users. Cheers, John T.
Hello Andr??! Andr?? Jee schrieb:> sweetums:/# net groupmap list > sweetums:/#That's definitely an error. Did you try testparm? If not, please do so and quote the output.> So I can't do 'net groupmap modify ntgroup="Domain Admins" > unixgroup=admin' either because there are no such group.That's obvious... Was Samba running when you ran "net groupmap list"? timbo