samba - Jan 2008 - Samba Administrator account for XP

Dear all

              I have install samba + ldap and it is successfully joing the
domain but problem is when i login in XP machine with Administrator account of
samba i cannot change anything in XP even not system time so is it problem of
privileges ??


$ cat ~/satish/url.txt                                                      

http://www.linuxbug.org
_____________________________________________________________________________________________________

       
---------------------------------
 5, 50, 500, 5000 - Store N number of mails in your inbox. Click here.

satish patel wrote:
> Dear all
> 
>               I have install samba + ldap and it is successfully joing the
domain but problem is when i login in XP machine with Administrator account of
samba i cannot change anything in XP even not system time so is it problem of
privileges ??
Get a copy of MS's ifmember.exe and issue it with the /list switch while
logged into Windows with a domain account. That will show you which groups you
are a member of on the domain and local
workstation. Likely you have something amiss in the group mapping area.

I cover that sort of thing in my Samba presentation:
"Samba 3 PDC for Windows Clients and Samba 3 Book Review"
http://www.lueckdatasystems.com/pub/presentations/iccm2007.pdf

Start on page 7 of the presentation. I do not use LDAP in this presentation, so
the EXACT solution will be different in your case.

-- 
Michael Lueck
Lueck Data Systems
http://www.lueckdatasystems.com/

satish patel wrote:
> i have created root 
> account and map root account with Administrator /etc/samba/smbuser file 
I have never heard of such a file...

 > i have created root account

I have specifically avoided creating an account named root. Since Ubuntu which
we are now using uses a sudo environment, seems a wise decision way back when.

Still, I do not think that alone is your source of trouble.
> and root UID=0 and memeber of Domain Admin group. but still when i am 
> login in XP client machine with root user in samba Domain i  dont have 
> much privielges on XP machine even i can not change my XP client  
> machine System Time 
Did you get a copy of ifmember.exe and run it with the /list option to see which
local and domain groups you are a member of? What did it return? Are you a
member of the local Administrators group or
not? (Sounds like not.)

satish patel wrote:
 > dear your URL PDF is damage so that could not open properly

Works fine for us with both Linux and Windows and the Acrobat / Firefox for
those platforms.

-- 
Michael Lueck
Lueck Data Systems
http://www.lueckdatasystems.com/

satish patel wrote:
> Dear thanx for cordinate wid me
> 
>             I send my  example files what i going to tell when i 
> configure samba without LDAP then i am able to login in XP machine with 
> root with full privileges at that time my root user group of Domain 
> Admin Group ok.
When you configure Samba without LDAP, then I think group mappings would end up
referring to file:
/var/lib/samba/group_mapping.tdb

While configured as LDAP as the back end, it is necessary to map domain groups
to local workstation groups, which can be done via:
net groupmap add ...
commands as illustrated on page 8 of the presentation I referred to. Otherwise
you will only have the default information pre-populated when you prep the LDAP
server for use with Samba.

Thus I can understand why you get different results when you change database
back-ends.

Have you yet checked "ifmember.exe /list" and have it show what groups
your test ID is actually a member of?

-- 
Michael Lueck
Lueck Data Systems
http://www.lueckdatasystems.com/