search for: domadm

...ipt' in smb.conf, just replacing the macros). Then you should be able to join with any domain admin account. Now, if the user you are going to join as can run the script (requires rx perms on the scripts: [root@hercules bgmilne]# ll /usr/share/samba/scripts/ total 112 -rwx------ 1 root domadm 1720 Jan 14 02:29 export_smbpasswd.pl* -rwx------ 1 root domadm 3498 Jan 14 02:29 import_smbpasswd.pl* -rwxr-xr-x 1 root domadm 1703 Jan 14 02:29 print-pdf* lrwxrwxrwx 1 root domadm 26 Jan 17 16:24 smbldap_conf.pm -> /etc/samba/smbldap_conf.pm -rwxr...

Hi I got a problem with groupmapping. It doesn't work correct: Wilma2:/home/root # net groupmap list | grep 512 Domain Admins (S-1-5-21-3371203057-3264423045-2392767973-512) -> domadm ldapsearch -x cn=domadm: # domadm, groups, wms-hn.de dn: cn=domadm,ou=groups,dc=my-domain objectClass: posixGroup objectClass: sambaGroupMapping cn: domadm gidNumber: 65669 memberUid: tilo sambaSID: S-1-5-21-3371203057-3264423045-2392767973-512 sambaGroupType: 2 displayName: Domain Admins descript...

...rver 127.0.0.1 The username or password was not correct" If I try to add groups I also get the same error. and I don't know if this is relevent or not but when I try to join win groups and Unix groups via this command " net groupmap add ntgroup="Domain Admins" unixgroup=domadm" I get this message. "No rid or sid specified, choosing algorithmic mapping Successully added group Domain Admins to the mapping db" and the group domadm is there. If I try to use any of the user that are in the domadm group, they don't have any admin rights. I don't...

...first, because on my laptop I don't normally log on to the domain. I just noticed when I tried to use my desktop and log on to the domain... I don't have Domain Admin privileges. So, I look at 'net groupmap list' ... and it shows the Domain Admins group as mapped to the unix group domadm. Looks good, right? Domain Admins (S-1-5-21-3475858016-1413099138-3485012925-512) -> domadm Next I tried deleting that groupmap by using 'net groupmap delete sid=S-1-5-21-347...........' Now the groupmap was deleted and now shows this: Domain Admins (S-1-5-21-3475858016-1413099138-348...

...hares. I did read chapters 12 & 13 of the how to but I'm still stuggling. So far I have: 1. created a share: [Linux Software] comment = Help your self browseable = yes writable = yes path = /mnt/windows/Software/ #nt acl support = true public = yes write list = @domadm 2. I created a user named jon and have added him to the domadm group also did an smbpasswd -a. Jon set his linux password to match his windows password - I don't know if this is critical... 3. The unix permisions on /mnt/windows/Software: drwxr--r-- 57 tim root 32768 Oct 8 00...

Hi All, when i did testing with group mapping, i mapped a Unix Group(domadm) with Windows Domain Group(domain users). then i access a samba share from Windows Domain User(administrator), and create a file. but the file's group is still Windows Domain Group(domain user), not Unix Group(domadm). is it right? if it is, how should i check if my group mapping is working w...

...p list System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> -1 Domain Users (S-1-5-21-3876029557-4061927837-2224609541-513) -> users Power Users (S-1-5-32-547) -> -1 Print Operators (S-1-5-32-550) -> -1 Administrators (S-1-5-32-544) -> domadm Domain Admins (S-1-5-21-3876029557-4061927837-2224609541-512) -> domadm Account Operators (S-1-5-32-548) -> -1 Domain Guests (S-1-5-21-3876029557-4061927837-2224609541-514) -> nogroup Backup Operators (S-1-5-32-551) -> -1 Users (S-1-5-32-545) -> -1 My user, for example, is in the do...

...rver 127.0.0.1 The username or password was not correct" If I try to add groups I also get the same error. and I don't know if this is relevent or not but when I try to join win groups and Unix groups via this command " net groupmap add ntgroup="Domain Admins" unixgroup=domadm" I get this message. "No rid or sid specified, choosing algorithmic mapping Successully added group Domain Admins to the mapping db" and the group domadm is there. If I try to use any of the user that are in the domadm group, they don't have any admin rights. I don't...

...ist of available groups from the Samba server, but when I click "Apply" I receive the message: "A member could not be added to or removed from the local group because the member does not exist" I'm fairly certain I followed the setup correctly; I added a group called "domadm" to the etc/group file and added a user to that group using usermod. I've tried several configurations in smb.conf with "domain admin group" and "domain admin users" including: 1. domain admin group = @domadm 2. domain admin group = root @domadm 3. domain admin group...

...sers, groups, modify them etc.) from Windows workstation using usrmgr.exe It looks like what is stated in Samba HOWTO collection as prerequisites is not enough. First I found Chapter 12 cxl "How to make Samba PDC users member of the Domain Admins group" - made the nonroot user member of domadm group, added domadm unix group and groupmapped Domain Admins NT group to domadm UNIX group. This didn't work. I suggest changing "steps describe how to make Samba PDC users members of the Domain Admins" to "steps describe how to make Samba PDC users members of the Domain Admins...

Is there more documentation for smbgroupedit than the manpage ? I'm trying to get the domain admins group to work. Steps i taken so far 1. create a unix group domadm 2. add my admin users to the domadm group 3. map the Domain Admins Group to the domadm group 4. make the domain admins group a domain group (smbgroupedit reported it as unknown) 5. remove all domain users and groups from the admin group on the W2K box 6. Added the Domain Admins group. Then i add...

...user which currently is registered as a "User" of WinXP but must be changed to "Domain Admin" in order for some new software which he must use to be operable. Of course giving him the root passwd is definately out of the question. I already have the "domain admin group = @domadm" parameter in my smb.conf file and the only memeber of domadm is root. I added via YAST the user to domadm group as well (was only a member of "users" group) but when I try to use any Admin issues in WinXP when the user logs in, I see that he doesn't have the priviledges require...

...e builtin groups for this release? When using tdbsam with previous releases one would automatically get such groups as: System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> -1 Domain Admins (S-1-5-21-1832519723-2688400599-3493754984-512) -> domadmin Domain Guests (S-1-5-21-1832519723-2688400599-3493754984-514) -> nobody Power Users (S-1-5-32-547) -> -1 Print Operators (S-1-5-32-550) -> prtadmin Administrators (S-1-5-32-544) -> -1 Account Operators (S-1-5-32-548) -> -1 Domain Users (S-1-5-21-1832519723-2688400599-3493754984-513...

...erver = yes status = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 max log size = 50 logon script = %G.bat veto files = /*.vbs/*.eml/*.nwc/readme.exe/admin.dll/riched20.dll/Desktop/History/Application Data/Cookies/ directory mode = 0770 security = user domain admin group = @domadm domain logons = yes delete veto files = yes server string = Samba Server %v workgroup = ADMIN local master = yes log level = 7 netbios name = adminserver log file = /usr/local/samba/var/log.%m guest account = samba os level = 128 username map = /usr/local/samba/lib/users.map logon drive...

...time server = true # some defaults preserve case = yes short preserve case = yes deadtime = 15 hosts allow = 10. 127. security = user socket options = TCP_NODELAY os level = 255 preferred master = yes local master = yes domain logons = yes domain master = yes share modes = no admin users = +domadm logon path = \\bertha\profiles\%u logon drive = p: logon script = start.bat logon home = \\bertha\%u wins support = yes dns proxy = yes encrypt passwords = true password level = 0 null passwords = no map to guest = bad user dead time = 0 nt acl support = no printcap name = CUPS printing = cups...

...ute 'sambaSID' not allowed (Object class violation) Could not update group database We don't get this error when we CREATE a mapping because the objectClass is automatically added. 5) A last bug was found while modifying an existing mapping : /usr/local/samba/bin# ./net groupmap list domadm (S-1-5-21-3746524048-3196343125-3229652583-512) -> domadm test (S-1-5-21-3746524048-3196343125-3229652583-520) -> newdomadm opuspdc1:/usr/local/samba/bin# ./net groupmap modify sid=S-1-5-21-3746524048-3196343125-3229652583-512 unixgroup=newdomadm Updated mapping entry for /usr/local/samba/bin...

...logon drive = H: domain logons = Yes os level = 33 preferred master = Yes domain master = Yes wins support = Yes ldap ssl = start tls socket address = username = @domusers valid users = @domusers admin users = @domadm printer admin = chj hosts allow = 192.168.1., 127. printing = lprng [homes] comment = Home Directories path = /home/%u valid users = %S read only = No create mask = 0600 directory mask = 0700 browseable = No [netlogon...

.... I had an already established domain running under Samba 2.2.8. I then upgraded to 3.0. I removed the 'domain admin users = root' line from my smb.conf because certain tools complained about it being there. After the upgrade, I followed the Samba 3 HOWTO docs on samba.org. I created my domadm, domguests, and domusers groups. I used the command 'net groupmap add ntgroup="Domain Admins" UNIXgroup=domadm' to map the groups together. This should have had the same effect as having the 'domain admin users = root' line in 2.2.8, but whenever I would logon to any co...

Hi, I have Samba 3 as Domain controller. From a Windows 2000 Professional I share a folder (c:\test) with access permission for certain domain user (MYDOMAIN\yo). I can access to that folder from other w2000 with that user validated into it. If I add that user to a unix group (domadm) and map this group to Domain Admins (net groupmap modify ntgroup="Domain Admins" unixgroup=domadm) and change w2000 shared folder access permission for group MYDOMAIN\Domain Admins I get Access Denied. What's wrong? Thanks.

...mary group has not been set. I've been trying usermod -g 'group' 'user' and "pdbedit -r -u USER -G S-1-5-21-141977700-2934510299-2690187342-512" but nothing seems to help... So. If anyone can help me with some info-sites. Thanks, Mark amslinux:~# pdbedit -r -u domadm -G S-1-5-21-141977700-2934510299-2690187342-512 Unix username: domadm NT username: domadm Account Flags: [U ] User SID: S-1-5-21-141977700-2934510299-2690187342-1546 Primary Group SID: S-1-5-21-141977700-2934510299-2690187342-512 Full Name: Home Direc...