search for: domainguests

I was wondering if anyone has come across an error in their winbindd log: could not lookup membership for group rid S-1-5-21-3506869558-4124343851-970148941-2025 in domain BOGUS (error: NT_STATUS_NO_SUCH_GROUP) I have all the mappings done correctly: domainadmin (S-1-5-21-3506869558-4124343851-970148941-512) -> domainadmin domainusers (S-1-5-21-3506869558-4124343851-970148941-513) ->

...ly best to use the same names ["Domain Admins", "Domain Users", "Domain Guests"] and numbers [512, 513, 514] on the *nix side.) (If your version of Samba-LDAP can't handle embedded white space, you'll need to change these names to DomainAdmins, DomainUsers, and DomainGuests.) If these three entries don't exist, Windows can get quite unhappy; there might even be warnings about this in the Samba logs. (Note _many_ instructions incorrectly give the Windows group numbers 0x200, 0x201, and 0x202 as 200, 201, and 202. Don't be suckered even though this error has b...

...s*updated*successfully* passwd chat debug = Yes username map = /etc/samba/smbusers unix password sync = Yes admin log = Yes log file = /var/log/samba/log.%m max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 domain admin group = @DomainAdmins domain guest group = @DomainGuests domain logons = Yes os level = 33 lm announce = Yes preferred master = Yes domain master = Yes dns proxy = No winbind use default domain = Yes alternate permissions = Yes valid users = root admin users = root printer admin = root printing = lprng [homes] comment = Home Directories va...

...hing I can't do... Basically: how can I add some of my users to the Domain admin group ? I use FreeBSD-5.1+samba3.0RC3. My group maps: Admins du domaine (S-1-5-21-xxxx-512) -> domainadmins Utilisa. du domaine (S-1-5-21-xxxx-513) -> domainusers Invites du domaine (S-1-5-21-xxxx-514) -> domainguests Ordinateurs du domaine (S-1-5-21-xxxx-515) -> domaincomputers All my users sambaPrimaryGroupSID are set to 513. Now, I added some users to the "domainadmins" group (with the memberUid attribute in LDAP) but they do not get admin priviledges on NT workstations... What am I missing he...

...nix password sync = Yes log level = 2 log file = /etc/samba/individual/%m.log name resolve order = wins lmhosts host time server = Yes socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192 load printers = No #oplocks = No add user script = /usr/sbin/useradd -n -g domainusers -G domainguests -d /dev/null -s /bin/false -M %u delete user script = /usr/sbin/userdel %u add group script = /usr/sbin/groupadd -r %g delete group script = /usr/sbin/groupdel %g add user to group script = /usr/bin/gpasswd -a %u %g delete user from group script = /usr/bin/gpasswd -d %u %g set primary group script...

...nstructors (S-1-5-21-124999916-2847287174-2328787173-1837) -> instructors Accounting (S-1-5-21-124999916-2847287174-2328787173-1829) -> accounting Domain Admins (S-1-5-21-124999916-2847287174-2328787173-512) -> domainadmins Domain Guests (S-1-5-21-124999916-2847287174-2328787173-514) -> domainguests Domain Users (S-1-5-21-124999916-2847287174-2328787173-513) -> domainusers Power Users (S-1-5-32-547) -> -1 Print Operators (S-1-5-32-550) -> -1 Administrators (S-1-5-32-544) -> domainadmins Account Operators (S-1-5-32-548) -> -1 Backup Operators (S-1-5-32-551) -> -1 Users (S-1-5-...

...aPrimaryGroupSID: S-1-5-21-3658755377-320826499-3197562212-512 2. libnss-ldap works: example$ getent passwd ; getent group **pass*> lenec:x:1081:513:User Lenec:/home/lenec:/bin/false **pass*> MORIA$:x:121:65534:Komputer MORIA:/root:/bin/false **group*> domainadmins:x:512:lenec **group*> domainguests:x:514:501 **group*> domainusers:x:513: 3. pam-ldap works: user 'lenec' can access samba shares AND can change his password from a W98 client machine while logged-in to 'domain' (a tree-field login window when loggin into W98). Now, when I test this with W2K: selecting "My_C...