search for: localgroup

Hello Mailinglist, I have created a local user "localuser" who is in the local group "localgroup" $ id uid=1001(localuser) gid=1001(localgroup) groups=1001(localgroup) My machine authenticates against Active Directory - works The AD-User "aduser" belongs to a domain group "adgroup" $ id uid=6161(aduser) gid=5513(dom?nen-benutzer) groups=5513(dom?nen-benutzer),10656(...

...r1". Operation cancelled. samba-tool group addmembers 'SAMDOM\domaingroup' 'SAMDOM\user1' ERROR(exception): Failed to add members "SAMDOM\user1" to group "SAMDOM\domaingroup" - Unable to find group "SAMDOM\domaingroup" samba-tool group addmembers localgroup 'SAMDOM\user1' ERROR(exception): Failed to add members "SAMDOM\user1" to group "localgroup" - Unable to find group "localgroup"

...ies the existens of the users on the PDC. So I dont't have to create local users (/etc/passwd) for users who want to connect to the shares in the smb.conf. I authorise them by adding valid users = domain+domainuser to the smb.conf. This works very well. Now my problem: By writing valid users = @localgroup or +localgroup I can authorise local groups (/etc/group) to connect to the shares. Now I want to add the domainusers to some local groups.Putting the domainusers in groups should save much time because otherwise I have to add each domainuser for every share seperatly. E.g. valid users = domain1+do...

...eetings, I'm running Samba on a Debian stable server and have run into a problem I can't seem to get past. It's version 3.2.5. The basic setup is that it authenticates users via 'security = ads' and controls access to individual shares using local groups via 'valid users = @localgroup'. All of the users have accounts in /etc/password and are added to the groups in /etc/group. This has been working great for years. My problem comes when I install the 'winbind' package in order to get access to ntlm_auth. Once winbindd is running, my local group authentication no long...

...gs? The Domain Admins is working for example, but I sure don't see where the settings were stored on disk. 2) Running "net user pianoman /domain" on the Win2K client side shows the Domain Group membership, but not the local group. Since DOMAINNAME\Domain Admins is made a member of the localgroup administrators I have the admin permissions, but I did not get it via the ntadmins mapping I did above. Did I miss something in this example that was the key to making it work? -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly.

...ers type=d net groupmap add ntgroup=ntguests unixgroup=ntguests type=d When we join the domain, we run roughly the following script: ?REM JoinDomain.cmd NETDOM.EXE JOIN %ComputerName% /Domain:LDS-DEMO /UserD:ldsinst /PasswordD:password REM Remove domain to local group mapping done by NETDOM NET LOCALGROUP "Users" "LDS-DEMO\Domain Users" /DEL NET LOCALGROUP "Administrators" "LDS-DEMO\Domain Admins" /DEL REM Add domain to local group mapping NET LOCALGROUP "Administrators" "LDS-DEMO\ntadmins" /ADD NET LOCALGROUP "Power Users" &quot...

...fully access their shares. The system is firewall and samba (hosts deny, hosts allow) secured to deny access from anyone outside of the network. Excerpt from /etc/samba/smb.conf: security = ads realm = <AD server name in capital case> password server = AD server name workgroup = LOCALGROUP idmap uid = 500-1000000 idmap gid = 500-1000000 winbind separator = + winbind enum users = no winbind enum groups = no winbind use default domain = yes template homedir = /home/%D/%U template shell = /bin/bash client use spnego = yes domain master = no [homes] comme...

I'm getting following response below to the command 'net sam createlocalgroup demo -d 3': [2008/09/16 16:03:46, 3] param/loadparm.c:lp_load(5065) lp_load: refreshing parameters [2008/09/16 16:03:46, 3] param/loadparm.c:init_globals(1445) Initialising global parameters [2008/09/16 16:03:46, 3] param/params.c:pm_process(572) params.c:pm_process() - Processing config...

...mins" And the "DOMAIN\Adminstrators" is in the Buildin OU. And same for "DOMAIN\Users" contains: Authenticated Users, Domain Users, INTERACTIVE) So imo this is a bug as Achim told. Alle local security groups must map correctly. And but must try to not mix BUILDIN\localgroup and DOMAIN\localgroup So imo, if samba is uses as standalone server all Security groups map to BUILDIN\localgroups. And when its a domain AD DC server. BUILDIN maps to OU=Buildin and here are the correct groups like DOMAIN\localgroups Greetz, Louis

Hi all, I'm not able to create localgroups as described in "docs/man/Samba-HOWTO-Collection/groupmapping.html" I have tested Samba 3.2.5 and 3.2.6 on Debian lenny. As usual I am using openldap as backend. First I have tested with smbldap-tools, then I have switched to ldapsam:editposix = yes ldapsam:trusted =...

...> > samba-tool group addmembers 'SAMDOM\domaingroup' 'SAMDOM\user1' > ERROR(exception): Failed to add members "SAMDOM\user1" to group > "SAMDOM\domaingroup" - Unable to find group "SAMDOM\domaingroup" > > samba-tool group addmembers localgroup 'SAMDOM\user1' > ERROR(exception): Failed to add members "SAMDOM\user1" to group > "localgroup" - Unable to find group "localgroup" > No, I asked if you were trying it that way and if you were, to try it the second way. The only way I get the error...

...amba <samba at lists.samba.org> wrote: > > samba-tool group addmembers domaingroup user1 > ERROR(exception): Failed to add members "user1" to group > "domaingroup" - Unable to find "user1". Operation cancelled. > > samba-tool group addmembers localgroup user1 > ERROR(exception): Failed to add members "user1" to group "localgroup" > - Unable to find group "localgroup" > > > Do you have users in /etc/passwd ? If so, are you trying to add one of these users to an AD group ? Rowland

Hi samba-tool group addmembers stage user ERROR(exception): Failed to add members "user" to group "stage" - Unable to find "user". Operation cancelled. File "/usr/lib/python2.7/dist-packages/samba/netcmd/group.py", line 227, in run add_members_operation=True) File "/usr/lib/python2.7/dist-packages/samba/samdb.py", line 274, in

...ting myself in to the administrators group. I'm using samba as a domain controller. I have a samba account called administrator. I have these settings in my smb.conf:: domain group map = /etc/samba/groups.mapping domain user map = /etc/samba/domainuser.mapping local group map = /etc/samba/localgroup.mapping This is in my domainuser.mapping to alias the administrator samba account to the linux root account: root = \\NORTHTRAILRV\\Administrator This is in my groups.mapping to alias admins to the Administrators groups admins = Administrators This is the group listing in /etc/group: admins:x:...

I am fascinated!!!!!! 68 day from my last post, and 1142 more posts.... STILL no reply with even hint of solution.... In total 117 days and 1915 messages.... Nice score.... respectable..... And what I want?? This: - need share level of security - need forcing of user who access that share - need forcing of file/directory create mask Goal: Allowing network (windows and linux) users (as well as

Hi folks, we have a problem with a win2003 DC and Samba. The authentification of users from the dc works fine, but when we added users from a forest trust in a active directory localgroup, samba don't find the users... I post this problem here: https://bugzilla.samba.org/show_bug.cgi?id=5245 Maybe you can help. Cheers Paul -- Der GMX SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen! Ideal f?r Modem und ISDN: http://www.gmx.net/de/go/smartsurfer

...the 'Domain Admins' & 'Domain Guests' manualy with the 'net groupmap add ...', but this was not the hit. On a second machine with the identical smb.conf-File but Samba version '3.0.20b-3.3-SUSE' all is fine ('net groupmap list' shows 3 Domaingroups and 9 Localgroups). What can be the reason and how i can fix that ? Thanks Sven

Hello, I am a Samba-newbie, so please excuse, if my question seems to you stupid. I've set up a PDC, based on Samba 3.0.14a (SerNet) and a OpenLDAP-Server. So I took a Windows XP client and integrated it to the domain. Afterwards I logged in as administrator and copied the existing profile of an user to the server. The user was able to login and his profile was loaded from the server. But I

Most of my users (unfortunately me included) need to use a bloated, badly designed piece of sh^Hoftware that only works with administrator's rights (I won't say names but it's from a big german company strongly pushing for software patents). How can I assign those users Administrator's rights without phisically going to each machine? I cold put them in the 'Domain

...16:36:15 testbox winbindd[50492]: could not lookup domain group debugger users --------------------- All non-local groups show up just fine in the BSD system. Local groups do not show up in a getent group. All groups, including the local ones, show up when I run wbinfo -g. Running wbinfo -n <localgroup> comes back with a SID: $ wbinfo -n dnsadmins <munged-SID> Local Group (4) This SID is trackable back to a gid: $ sudo wbinfo --sid-to-gid <munged-SID> 11105 Why, then, are these groups not actually getting populated? Can anyone shed some light on this? -HKS