search for: domguest

...having the SID part of the first "net getlocalsid" map to no unix group but they are also not used: > net groupmap list > [...] > Domain Users (S-1-5-21-4166838278-3756557259-2095403906-513) -> -1 > domadmins (S-1-5-21-2018781741-1218799122-1862565094-512) -> admin > domguests (S-1-5-21-2018781741-1218799122-1862565094-514) -> nobody > Domain Guests (S-1-5-21-4166838278-3756557259-2095403906-514) -> -1 > Domain Admins (S-1-5-21-4166838278-3756557259-2095403906-512) -> -1 > domusers (S-1-5-21-2018781741-1218799122-1862565094-513) -> users > [...]...

...an already established domain running under Samba 2.2.8. I then upgraded to 3.0. I removed the 'domain admin users = root' line from my smb.conf because certain tools complained about it being there. After the upgrade, I followed the Samba 3 HOWTO docs on samba.org. I created my domadm, domguests, and domusers groups. I used the command 'net groupmap add ntgroup="Domain Admins" UNIXgroup=domadm' to map the groups together. This should have had the same effect as having the 'domain admin users = root' line in 2.2.8, but whenever I would logon to any computer in...

...gt; usuarios NT Admins (S-1-5-21-2403845858-3771094018-3344062789-719) -> ntadmin Domain Admins (S-1-5-21-528226156-890416033-2029241632-512) -> domadmin Domain Users (S-1-5-21-528226156-890416033-2029241632-513) -> domusers Domain Guests (S-1-5-21-528226156-890416033-2029241632-514) -> domguests -- -----BEGIN GEEK CODE BLOCK----- Version: 3.1 GCS/IT d- s+:+() a31 C+++ UBL+++$ P+ L+++ E--- W++ N+ o++ K- w--- O+ M+ V- PS+ PE+ Y++ PGP+>+++ t+ 5 X+$ R- tv-- b+++ DI D++>+++ G++ e- h+(++) !r !z ------END GEEK CODE BLOCK------

...admin group, and group mapping was done: [root@server1 samba]# net groupmap list Domain Admins (S-1-5-21-3370306482-4184561861-561853233-512) -> domadmin Domain Users (S-1-5-21-3370306482-4184561861-561853233-512) -> domuser Domain Guests (S-1-5-21-3370306482-4184561861-561853233-512) -> domguest I saw this on problem discussed on several mailinglists, but with no solution. maybe anybody here can help me with a hint. cu, thorsten -- Thorsten Scherf GLS Instructor Red Hat GmbH - Global Learning Services Hauptstaetterstr. 58, D-70178 Stuttgart, Germany Tel: +49-711-96437-500, Fax: +49-7...

...wins support = yes admin users = root @ntadmin My admin is called admin: $ id admin uid=1002(admin) gid=71(ntadmin) Gruppen=71(ntadmin),512(domadmin) $ cat /etc/samba/smbusers admin = administrator nobody = guest pcguest smbguest $ getent group domadmin:*:512:admin domuser:*:513:u1,u2,... domguest:*:514: ntadmin:*:71: $ net groupmap list Dom?nen Benutzer (S-1-5-21-884593593-3352586541-3369792858-513) -> domuser Dom?nen Administratoren (S-1-5-21-884593593-3352586541-3369792858-512) -> domadmin Dom?nen G?ste (S-1-5-21-884593593-3352586541-3369792858-514) -> domguest $ net rpc user...

...then domain related functions being run on that Win2K client. 3) Windows Security - Local Groups specifying what permissions that domain account user has on the local Win2K box while they are logged in. So I created some groups in /etc/group as follows: domadmin:x:2000:pianoman domusers:x:2001: domguest:x:2002: ntadmins:x:2010:pianoman ntpwrusr:x:2011: ntusers:x:2012: ntguests:x:2013: Then I built my own initGrps.sh as follows: #!/bin/bash # # initGrps.sh # # Map Windows Domain Groups to UNIX groups net groupmap modify ntgroup="Domain Admins" unixgroup=domadmin net groupmap modify nt...

...users usuarios de samba (S-1-5-21-528226156-890416033-2029241632-717) -> usuarios Domain Admins (S-1-5-21-528226156-890416033-2029241632-512) -> domadmin Domain Users (S-1-5-21-528226156-890416033-2029241632-513) -> domusers Domain Guests (S-1-5-21-528226156-890416033-2029241632-514) -> domguests > What's the output of the net getlocalsid? # net getlocalsid SID for domain ORA9I is: S-1-5-21-528226156-890416033-2029241632 > It should match the SambaSID value in the SambaDomainName ldap entry. [2005/04/15 13:40:36, 10] auth/auth_util.c:debug_nt_user_token(490) NT user token o...

...to logon to the domain. I have created the tdbsam using the "smbpasswd -a root" command. I also added User Administrator as unix and samba account. I also mapped groups "Domain Admins", "Domain users" and "Domain Guests" to unix groups domadmins, domusers and domguests using the "net groupmap modify" command. But is doesn't work. I cannot join a XP professional ws to the domain, I keep getting the message that the domain controller cannot be found. I am able to open the netlogon share from the ws when I am logged on the ws as a local Administrator...

...seradd.pl -w -d /dev/null -g domcomputers -s /bin/false "%u" -----------------snap--------------------------------- here are the steps of my migration 1. smbldap-groupadd.pl -g 512 -r 512 domadmins smbldap-groupadd.pl -g 513 -r 513 domusers smbldap-groupadd.pl -g 514 -r 514 domguests smbldap-groupadd.pl -g 515 -r 515 domcomputers 1. smbd and nmbd don''t run 2. net rpc join -S WALDFEE -w HOLLADIE -U administrator%blabla 3. net rpc testjoin Join to 'HOLLADIE' is OK 4. net rpc vampire -S waldfee -U Administrator%blabla works fine and sort a...

...net groupmap list System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> -1 Domain Users (S-1-5-21-1328167348-507421394-93929189-513) -> domuser Power Users (S-1-5-32-547) -> -1 Domain Guests (S-1-5-21-1328167348-507421394-93929189-514) -> domguest Print Operators (S-1-5-32-550) -> -1 Administrators (S-1-5-32-544) -> wheel Account Operators (S-1-5-32-548) -> -1 Domain Admins (S-1-5-21-1328167348-507421394-93929189-512) -> wheel Backup Operators (S-1-5-32-551) -> -1 Users (S-1-5-32-545) -> -1 All the windows boxes in my doma...

...30718-1223249177-2812214006-514) -> -1 Account Operators (S-1-5-32-548) -> -1 Domain Users (S-1-5-21-3676430718-1223249177-2812214006-2027) -> domuser Backup Operators (S-1-5-32-551) -> -1 Users (S-1-5-32-545) -> -1 Domain Guests (S-1-5-21-3676430718-1223249177-2812214006-2029) -> domguest --- end --- What I don't understand is why the Domain Admins RID changes when I point it to the the unix groups. The UNIX group is set up correctly, and the user is a member of domadm and domuser. In the documentation it appears to keep the same RID (512, 513, and 514 respectively in this...

...dn: ou=groups,dc=example,dc=com dn: ou=computers,dc=example,dc=com dn: sambaDomainName=EXAMPLE,dc=example,dc=com dn: cn=domusers,ou=groups,dc=example,dc=com dn: cn=domadmins,ou=groups,dc=example,dc=com dn: uid=Administrator,ou=users,dc=example,dc=com dn: uid=nobody,ou=users,dc=example,dc=com dn: cn=domguests,ou=groups,dc=example,dc=com dn: sambaSID=S-1-5-32-544,ou=groups,dc=example,dc=com dn: sambaSID=S-1-5-32-545,ou=groups,dc=example,dc=com dn: sambaSID=S-1-5-32-546,ou=groups,dc=example,dc=com dn: uid=nbensa,ou=users,dc=example,dc=com dn: uid=samba3$,ou=computers,dc=example,dc=com dn: uid=marisa,ou=u...

...t Samba 4) Rerun initGrps.sh which does... # Map Windows Domain Groups to UNIX groups net groupmap modify ntgroup="Domain Admins" unixgroup=domadmin net groupmap modify ntgroup="Domain Users" unixgroup=domusers net groupmap modify ntgroup="Domain Guests" unixgroup=domguest 5) Run the "net rpc rights..." command But not even that fixes it. Ideas? Thanks, -- Michael Lueck Lueck Data Systems http://www.lueckdatasystems.com/

...bin/bash # # initGrps.sh # Map Windows Domain Groups to UNIX groups net groupmap add ntgroup="Domain Admins" unixgroup=domadmin rid=512 type=d net groupmap add ntgroup="Domain Users" unixgroup=domusers rid=513 type=d net groupmap add ntgroup="Domain Guests" unixgroup=domguest rid=514 type=d # Create some Domain Groups to administer local security net groupmap add ntgroup=ntadmins unixgroup=ntadmins type=d net groupmap add ntgroup=ntpwrusr unixgroup=ntpwrusr type=d net groupmap add ntgroup=ntusers unixgroup=ntusers type=d net groupmap add ntgroup=ntguests unixgroup=nt...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 In an attempt to avoid the holiday rush common to software releases, the Samba Team is proud to announce the availability of the first patch release of the Samba 3.0 code base. This is the latest stable release of Samba and is the version that all production Samba servers should be running for all current bug-fixes. Some of the more common bugs in

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 In an attempt to avoid the holiday rush common to software releases, the Samba Team is proud to announce the availability of the first patch release of the Samba 3.0 code base. This is the latest stable release of Samba and is the version that all production Samba servers should be running for all current bug-fixes. Some of the more common bugs in

...t it exposed that I do not understand the relationship between these three. Here is a typical share that is used by three classes of users (see below) (with NFS, the directory): [Shared] comment = Public Share on %h path = /home/shared valid users = +domadmins, +domusers, +domguests write list = +domadmins, +domusers force group = domusers inherit permissions = yes inherit acls = yes map acl inherit = yes acl group control = yes ea support = yes vfs object = acl_xattr recycle store dos attributes = yes...

...wins support = Yes cups options = raw log level = 3 log file = /var/log/samba/%m.log [share] comment = test share path = /home/share read only = no public = yes valid users = 'VSOFS1.COM\domuser' 'VSOFS1.COM\domadmin' 'VSOFS1.COM\domguest' [root@sofsedutsm ~]# cat /var/kerberos/krb5kdc/kdc.conf [kdcdefaults] v4_mode = nopreauth kdc_tcp_ports = 88 [realms] SONAS.COM = { #master_key_type = des3-hmac-sha1 acl_file = /var/kerberos/krb5kdc/kadm5.acl dict_file = /usr/share/dict/words admin_keytab = /var/kerberos/krb5kd...

...ange because I did "net mapgroup add..." without there were problems. I stick underneath a copy here of net mapgroup: Linux:~# net groupmap list Domain Admins (S-1-5-21-275117359-2948478385-1723927003-512) -> domadmin Domain Guests (S-1-5-21-275117359-2948478385-1723927003-514) -> domguests Domain Users (S-1-5-21-275117359-2948478385-1723927003-513) -> domusers ----------------END PASTE------------------------------------------------- Samba works fine and testparm is: Linux:~# testparm Load smb config files from /etc/samba/smb.conf Processing section "[homes]" Processin...

...s to me strange because I did "net mapgroup add..." without there were problems. I paste a copy here of net mapgroup: Linux:~# net groupmap list Domain Admins (S-1-5-21-275117359-2948478385-1723927003-512) -> domadmin Domain Guests (S-1-5-21-275117359-2948478385-1723927003-514) -> domguests Domain Users (S-1-5-21-275117359-2948478385-1723927003-513) -> domusers ----------------END PASTE------------------------------------------------- Samba works fine and testparm is: Linux:~# testparm Load smb config files from /etc/samba/smb.conf Processing section "[homes]" Processin...