samba - Jun 2008 - New domain, Samba PDC, tdbsam, where are the groups?

I'm setting up a new domain with Samba 3.0.30 as the PDC using the
tdbsam backend.  'net group' yields an empty list, which is consistent
with the cautious appoach that Samba takes:  don't do anything
automagically.  But, a new Windows PDC will come online with several
well-known domain users and groups.  Did I miss the step where I run
some stock script that creates these expected objects?

-- 
Mark H. Wood, radical centrist     OpenPGP ID 876A8B75     mhwood@ameritech.net
If you can't show it, you don't know it.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
Url :
http://lists.samba.org/archive/samba/attachments/20080626/bf134eb1/attachment.bin

On Thursday 26 June 2008 05:05:40 Mark H. Wood wrote:
> I'm setting up a new domain with Samba 3.0.30 as the PDC using the
> tdbsam backend.  'net group' yields an empty list, which is
consistent
> with the cautious appoach that Samba takes:  don't do anything
> automagically.  But, a new Windows PDC will come online with several
> well-known domain users and groups.  Did I miss the step where I run
> some stock script that creates these expected objects?
Mark,

Please point us at the documentation you have been following.  If our 
documentation is wrong it has to be fixed.

Did you check Samba3-ByExample? Did you check the example networks that are 
fully documented? One of these may be close to your requirements. You can 
find this book at:

	1) Your local technical book store
	2) On-line in html:  http://samba.org/samba/docs/man/Samba3-ByExample/
	3) PDF: http://www.samba.org/samba/docs/Samba3-ByExample.pdf

With recent samba 3.0.x releases you need to create the windows group mappings 
manually.  This is documented in the Samba3-HOWTO - also available from the 
Samba web site.

The commands to create the group mappings are:

net groupmap add unixgroup=example ntgroup="Domain Example"
type=domain

It is not clear to me what you are asking. Do you mean that the Windows PDC 
automatically provides well-known groups, while Samba does not? If so, I have 
answered your question.  If this is not what you mean, please help us to 
understand the problem better.

Cheers,
John T.