search for: domainadmin

...create_canon_ace_lists: unable to map SID S-1-5-21-1234567898-1234567897-123456789-2996 to uid or gid. The SID is that of the domain admin (username: domainadmin) which is mappped in a username map file. smb.conf: --------- [global] workgroup = MYDOM security = ADS realm = MYDOM.LAN # Default idmap config for local BUILTIN accounts and groups idmap config *:backend = tdb idmap config *:range = 80001-90000 # idmap config for the MYDOM domain idmap confi...

...pies the driver files to \ \SERVER\print$\W32X86 then fails with an "Operation cannot be completed." If I use the rpcclient method I get a WERR_INVALID_PARAM error. Using the Adobe Generic PostScript driver as an example. osxserver:W32X86 root# ls -l total 2832 drwxrwxr-x 2 root domainadmins 68 Oct 25 23:16 0 drwxrwxr-x 2 root domainadmins 68 Oct 25 23:16 2 drwxrwxr-x 2 root domainadmins 68 Oct 26 00:00 3 -rw-r--r-- 1 fred domainadmins 13492 Oct 26 01:43 DEFPRTR2.PPD -rw-r--r-- 1 fred domainadmins 135248 Oct 26 01:43 PS5UI.DLL -rw-r--r-- 1 fred domainadmins...

...[print$] comment = Printer Download Area path = /etc/samba/drivers browseable = yes guest ok = yes read only = yes write list = @ntadmin, root, administrator I've used the APW to add the printer drivers into the appropriate directories: /etc/samba/drivers/W32X86/3: -rwxr--r-- 1 root domainadmin 136192 Aug 17 2001 HPCFONT.DLL -rwxr--r-- 1 root domainadmin 21866 Jul 21 2001 hpcljx.hlp -rwxr--r-- 1 root domainadmin 36622 Jul 21 2001 HPLJ4000.GPD -rwxr--r-- 1 root domainadmin 676352 Aug 17 2001 PCL5ERES.DLL -rwxr--r-- 1 root domainadmin 14362 Jul 2...

Hi ! I'm using samba-3.0RC3 as a PDC (for testing). I'm using the ldap backend. I created 1 user, 1 computer and some groups. I mapped the unix groups domainadmins to "Domain admins" with my_personnal_sid-512. I added my user to domainadmins. I set "admin users = @domainadmins" in my smb.conf, but I still do not have domain admin rights on workstations :( Any idea about what I did wrong ? Thanks in advance. Antoine

I have the following problem: As DomainAdmin I want to be able to mount a Windows directory, do a complete directory listing, read and possibly write all files in that directory. And all that even if the user has not included the DomainAdmin in the list of permitted users. To do this properly, I need to raise the following DomainAdmin privil...

...rately looking for an answer here... I've been fighting all week-end with samba-3.0 and there's still something I can't do... Basically: how can I add some of my users to the Domain admin group ? I use FreeBSD-5.1+samba3.0RC3. My group maps: Admins du domaine (S-1-5-21-xxxx-512) -> domainadmins Utilisa. du domaine (S-1-5-21-xxxx-513) -> domainusers Invites du domaine (S-1-5-21-xxxx-514) -> domainguests Ordinateurs du domaine (S-1-5-21-xxxx-515) -> domaincomputers All my users sambaPrimaryGroupSID are set to 513. Now, I added some users to the "domainadmins" group (wi...

...r work get me to Swat and the local root username and password does not. The only thing is, that the Swat is displays is the limited, cut-down, view-only version. There appears to be nothing in the Swat or Samba documentation that specifies Swat admin users specifically (ie. "swat admins = @DomainAdmins"). Adding "domain admin group = @DomainAdmins" to smb.conf did nothing (it's not a PDC anyway). Changing the "user = root" to "user = root, gwebster" in /etc/xinetd.d/swat did nothing (yes, I ran "killall -HUP xinetd"). So how and where do I speci...

Hi, im having Problems joining my ubuntu-Machine to a Win2k3 Active Directory. I tryed mala@ubuntu-05:/home$ sudo net ads join -U domainadmin domainadmin's password: Using short domain name -- INTRANET No DNS domain configured for localhost. Unable to perform DNS Update. DNS update failed! Joined 'UBUNTU-05' to realm 'INTRANET.LAN' What bothers my the most ist the line with 'localhost'. Where does this come...

...----------------------------------------------------------------------------------------- [root@pd1 ~]# net groupmap list System Operators (S-1-5-32-549) -> -1 Domain Users (S-1-5-21-2634632689-992284068-1313363551-513) -> -1 Domain Admins (S-1-5-21-2634632689-992284068-1313363551-512) -> domainadmin Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> -1 Domain Guests (S-1-5-21-2634632689-992284068-1313363551-514) -> -1 Domain Users (S-1-5-21-3505514775-834951346-1128776050-513) -> -1 Domain Admins (S-1-5-21-3505514775-834951346-1128776050-512) -> -1 Domain Guests (S-1-5-21...

...logon script = login.bat logon path = logon drive = h: domain logons = Yes preferred master = Auto local master = No domain master = Yes wins support = Yes idmap config * : backend = tdb admin users = tech, machine, lbarone, @domainadmins write list = @domainadmins printing = lprng print command = lpr -r -P'%p' %s lpq command = lpq -P'%p' lprm command = lprm -P'%p' %j lppause command = lpc hold '%p' %j lpresume command = lpc release '%p'...

On 02/04/16 17:37, Luke Barone wrote: > [global] > server max protocol = SMB2 > # Line above added by lbarone - March 30, 2016 > name resolve order = host wins lmhosts bcast > write list = @domainadmins > passwd chat = *new*password* %n\n *new*password* %n\n *updated* > admin users = machine,add,lbarone, at domainadmins > smb ports = 139 > lock directory = /var/cache/samba > preserve case = yes > passwd program = /usr/bin/passwd %u...

...-> -1 Mechanics (S-1-5-21-124999916-2847287174-2328787173-1827) -> mech Instructors (S-1-5-21-124999916-2847287174-2328787173-1837) -> instructors Accounting (S-1-5-21-124999916-2847287174-2328787173-1829) -> accounting Domain Admins (S-1-5-21-124999916-2847287174-2328787173-512) -> domainadmins Domain Guests (S-1-5-21-124999916-2847287174-2328787173-514) -> domainguests Domain Users (S-1-5-21-124999916-2847287174-2328787173-513) -> domainusers Power Users (S-1-5-32-547) -> -1 Print Operators (S-1-5-32-550) -> -1 Administrators (S-1-5-32-544) -> domainadmins Account Operato...

...ivilege to an extra group. Users in this group should not have Admin rights but they should be able to join workstations to the domain. My first try was to grant the right to a single user wich is working as expected. net rpc rights grant "TOPTEST\toptest.r" SeMachineAccountPrivilege -U domainadmin net rpc rights shows: hgest3201:~ # net rpc rights list accounts -Udomainadmin Password: TOPTEST\toptest.r SeMachineAccountPrivilege The user can join workstations to TOPTEST. But when I create a group named wksadd and grant SeMachineAccountPrivilege to the group the users of this group cant joi...

...main logons = Yes os level = 255 preferred master = Yes domain master = Yes wins support = Yes lock directory = /var/cache/samba idmap config * : range = 1000-1999999 idmap config * : backend = tdb admin users = machine, add, lbarone, @domainadmins write list = @domainadmins printing = lprng print command = lpr -r -P'%p' %s lpq command = lpq -P'%p' lprm command = lprm -P'%p' %j lppause command = lpc hold '%p' %j lpresume command = lpc release '%p'...

...> wrote: > > On 02/04/16 17:37, Luke Barone wrote: > > [global] > server max protocol = SMB2 > # Line above added by lbarone - March 30, 2016 > name resolve order = host wins lmhosts bcast > write list = @domainadmins > passwd chat = *new*password* %n\n *new*password* %n\n > *updated* > admin users = machine,add,lbarone, at domainadmins > smb ports = 139 > lock directory = /var/cache/samba > preserve case =...

On 01/04/16 21:20, Luke Barone wrote: > Anyone able to chime in? Suggestions on where to go? > > On Thu, Mar 31, 2016 at 11:21 AM, Luke Barone <lukebarone at gmail.com> wrote: > >> Hi all, >> >> I upgraded Samba 3 to 4 when doing a Debian Wheezy to Jessie upgrade over >> the last couple of weeks. Most things worked, but now that staff are back, >>

...as if Samba is ignoring the sup.groups. I'm using RH9.0 on Intel with samba-3.0.0-2_rh9 and OpenLDAP 2.0.27. When I do a "id -a username" the user is in all the necessary groups but when accessing shares the users' primary GID is used only. For example, uid=1001(jgray) gid=512(domainadmin) groups=512(domainadmin),0(root),513(domainusers),1536(SpiderAdmin) can only access shares that are defined this way: drwxrwx--- 2 jgray domainusers 48 Feb 5 18:12 test But not this way drwxrwx--- 2 root domainusers 48 Feb 5 18:12 test The user jgray should have acc...

...#39;t seem to do it. Question 2) Per the document about I have made the following permission changes to /home/samba: rwxrwxr-x 2 root domainusers 4096 2008-09-25 12:43 netlogon drwxrwxr-x 3 root domainusers 4096 2008-09-26 01:40 profiles I bet this would work if I added a user as a domainuser but domainadmins cannot store roaming profiles. How can I see it up so that I can have multiple domainadmins and domainusers (and not use root at all)? Question 3) I have three Linux machines that I would like to connect to the domain. Any good documentation on how to do that? For example, my son using Kubunt...

...rive = h: > domain logons = Yes > preferred master = Auto > local master = No > domain master = Yes > wins support = Yes > idmap config * : backend = tdb > admin users = tech, machine, lbarone, @domainadmins > write list = @domainadmins > printing = lprng > print command = lpr -r -P'%p' %s > lpq command = lpq -P'%p' > lprm command = lprm -P'%p' %j > lppause command = lpc hold '%p'...

...e Barone wrote: >>> >>> [global] >>> server max protocol = SMB2 >>> # Line above added by lbarone - March 30, 2016 >>> name resolve order = host wins lmhosts bcast >>> write list = @domainadmins >>> passwd chat = *new*password* %n\n *new*password* %n\n >>> *updated* >>> admin users = machine,add,lbarone, at domainadmins >>> smb ports = 139 >>> lock directory = /var/cache/sa...