search for: smbgroupedit

Hello, I've been using samba-3alpha22 as a PDC authenticating against LDAP. I am trying to add NT Groups using the smbgroupedit utility. It seems to me that smbgroupedit always looks in /etc/group and does not take into account the ldap configuration options specified in smb.conf. The relevant ldap entries are: passdb backend = ldapsam:ldap://ebola/ ldap suffix="dc=datasoft, dc=com" ldap admin dn = "cn=root...

...o logon as a normal user, > however I am not sure how to create an LDAP user that has > Administrator privileges on a Windows 2000 PC. > You need to have a unix group, to which you map a windows group. Which tool you use depends on which release of samba3 you are using. Up to alpha23 used smbgroupedit. And IIRC it only works with LDAP in alpha23 or later. See the man page for details, but basically: 1) find the SID of the windows group: # smbgroupedit -s 2)Create a unix group for that # groupadd domadm 3)map the SID to the unix group: # smbgroupedit -c <SID> -u <unix group> 4)Add un...

...nt appear as global group. on the w2k sp1 machine. i have also no domain admins right. the domain logon itself works fine. any ideas? btw: swat doesnt not work for me, it brings on the netscape client: document contains now data. just for information. thanx 4 any answers thomas output from smbgroupedit NT group (SID) -> Unix group System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> -1 Domain Admins (S-1-5-21-3013901393-2549662177-2794664770-512) -> tpuseradmin Domain Guests (S-1-5-21-3013901393-2549662177-2794664770-514) -> nogroup ne...

...nd for kerberos auth ? did it take it from the ldap.conf ? 3. [2004/07/06 21:15:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032) user 'root' does not exist I thin i had to transfer the users and groups from the linux server to the ActiveDirectory (PDC). i want to do it with smbgroupedit, but i didn't find it. why it is not in /usr/bin/ ? log.smbd said: 1. [2004/07/06 18:59:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(174) Failed to verify incoming ticket! 2. [2004/07/06 20:00:13, 1] smbd/service.c:make_connection_snum(619) 192.168.0.208 (192.168.0.208) connect...

Is there more documentation for smbgroupedit than the manpage ? I'm trying to get the domain admins group to work. Steps i taken so far 1. create a unix group domadm 2. add my admin users to the domadm group 3. map the Domain Admins Group to the domadm group 4. make the domain admins group a domain group (smbgroupedit reported it as un...

Hello *, i've got a debian samba 3.0alpha23 with ldapsam. my problem is that i can't set directory permissions. i alwasy get access denied. what i have: svpdc:/etc/samba# smbgroupedit -v params.c:Parameter() - Ignoring badly formed line in configuration file: ldap trust ids NT group (SID) -> Unix group System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> -1 kollegstufe (S-1-5-21-3839733233-2759951301-2176690758-3011) -> k...

..._user_groups: You should fix it, NT doesn't like that My goal is so that anyone in the "Domain Admins" group (by default) have administrative access to all member pcs of the domain. Currently, the pc's don't recognize any of the domain admins I've set according to man smbgroupedit. Anyone out there have a clue. Mucho Thanks! IRV FYI: My version of Samba is 2.999+3.0.alpha20-2 -------------- next part -------------- HTML attachment scrubbed and removed

...add/del user and group work fine but "add/del user to/from group" and "set primary group" seem not to do anything. (by placing /bin/echo %g %u>/test it do nothing too while it work with add user). I've found also an error with UserMng for NT when group names (created by smbgroupedit) are too long. If I rename it to a less caracters name, I can double-click on a group name and view who is in the group. With usermng for NT, we can delete a global group or a local group (without entry in smbgroupedit) without problem, but if this group appears in smbgroupedit and is local, it...

...sn't give my users administrative privilege. The logs seem to indicate that the account has administrative privileges but they do not. log.smbd shows this: [2003/10/14 13:33:46, 0] smbd/service.c:set_admin_user(314) name1 logged in as admin user (root privileges) BUG?: man samba mentions smbgroupedit, but this does not exist on my system, nor does the manpage in question? Is there particular option that configure has to be passed in order for it to show up? smbgroupedit(8) The smbgroupedit tool allows for mapping unix groups to NT Builtin, Domain, or Local groups. Also it allows se...

Hello, At one time I installed an alpha of samba-3.0 and it had a smbgroupedit command that mapped unix and windows groups via webmin. This seems to be missing in beta3, has it been depreciated? Also I can't seem to get the group map to take effect unless the unix group is the users primary group. Either that or I don't understand something. I do not have winbindd...

I need to map all of my NT id's to unix usernames. It looks like you can use NIS groups in the username map file. Why can't you put an NT group in there? Shouldn't I be able to map an entire NT group to a single unix id? Danny Travis danny.travis@exxonmobil.com

...the domain logon ( I supposed with wins , my two domain logon?s are wins server and bind 9 cannot be used to find them ). Where are the sid of the domain are stored ? ( I saw that if I stopped one server the other one answer, but sometimes the client cannot logon, ). I have the same question with smbgroupedit. Group_mapping.tdb must be the same on the two PDC ? I lost the domain_admins_group on one server. ( I mapped 512 sid group with a unix domadm group but it works either). Any lights would be greatly appreciated. thanks.

few day ago, i've asked about mapping unix-windows groups under samba 2.2.7a. now, i know that it is impossible. so i've changed samba on my PDC to 3.0 version (smbgroupedit). but still i've got problems with groups. before - from another machine when i've used 'wbinfo -g'i've got response from my PDC: Domain Admins Domain Users after change to samaba 3.0 with the same config file 'wbinfo -g' returns: Error looking up domain groups. any...

I have ACL's enabled and am getting a new error, in the Samba log (V 3.0.1Pre1, when attempting to set permissions on a file through Win2000: get_domain_user_groups: primary gid of user [terry] is not a Domain group ! get_domain_user_groups: You should fix it, NT doesn't like that Do I need to create a group on the windows(2000) side? The entries in the domaingroup.map

...er\%U\profiles logon home = \\server\%U\ logon script = START.BAT /home/samba/netlogn/START.BAT exists, line breaks are in dos -style ... if I log into NT4 on 2K ws, then i can mount \\pdc1\netlogon share and run START.BAT there.. So what the heck can it be? Another thing was that smbgroupedit -v showd several Domain Admins and Domain Users group (with different SIDs).. So i took experimental step and deleted some of them, leaving exactly one of every group.. Can this be somehow connected to 1st problem? Also samba complained that: get_domain_user_groups: primary gid of user [john] is...

Hi, I've posted this question before, but i'm still scratching my head. I've got a samba 3 cvs server with an ldap backend. When I do a search for users in a group either by net group <group> /domain or in user manager it returns access denied When I look at the logs on the server samba is searching for (uid=<group>(objectclass=sambaAccount)). The samba schema does not

Does anybody know more about groups? I am considering switching from NT to Samba domain and have made some test. Unfortunately I need to make two additional groups, except Domain Admin (one of them is Domain Users). Is it possible to make that with the stable version of Samba? And another, but not so important (for now) question. Currently I have a Samba server, providing files and printers

...s" What is prfmstrt2? Is that a group created in /etc/group? I take it the + is a winbind seperator. What is the manner of assigning domain users to have access to a share? Do I still need to create the domain user name in /etc/passwd, assign it to a group in /etc/group? Do I need to use smbgroupedit to make the domain group? This is all very confusing. I would think the goal would be to set up a share, like share1 below, and then put something like valid users = "DOMAIN+Domain Users" without adding users to /etc/passwd or adding stuff to /etc/group using winbindd. Is that not how...

I have finally gotten my system working but am now perplexed about how to do group mapping. I have read and followed the smbgroupedit instructions but to no avail. I have a SID in my windows xp box that shows the correct SID but does not map it to a human friendly name ie. Domain Admins. So thus I can not have effective groups on my server yet (bummer). It shows a broken SID icon for the admin group in the security window. Als...

I am running 3.0 alpha 17, and trying to join a domain.user to the administrator-group on each machine. So far, I've made a unix-group, put my usr in there, and set it with smbgroupedit. But when loggin in with this user, I do not have 100% adm. rights. When trying to join the user manually, the system cannot find DOMAIN\user on the server, and the server reports: SAMR_QUERY_SEC_OBJECT failed. Can anyone help? Sincerely, Martin Burheim Tingstad -------------- next part ---------...