search for: winadmin

Hi, I have recently upgaded from samba 2.2 to samba 3.0. I used to have "domain admin group = @winadmin" in my smb.conf, but I understand from the documentation that it is deprecated in favour of "net groupmap set "Domain Admin" winadmin". I would expect unix users who are members of the unix group winadmin to become Domain Admins, then, but they don't ?. Do I understa...

...eated an "add machine" script that basically looks for an unused uid/rid, and then creates a stub LDAP entry for the machine; the first time I issue "net join", the script is invoked and creates the LDAP entry correctly, but the join operation fails nevertheless: f1sa:~# net -U winadmin join winadmin's password: [2006/09/08 10:19:40, 0] utils/net_ads.c:ads_startup(191) ads_connect: No results returned Creation of workstation account failed Unable to join domain FAK1. The following log file entries are generated for this operation: SASL/GSSAPI authentication started SASL us...

Hai Rowland, Im pretty sure this is a bug in the DC part. I'll show. On the DC. dc1:~# getent passwd winadmin NTDOM\winadmin:*:10000:100::/home/users/winadmin:/bin/bash wbinfo --group-info="Domain Users" NTDOM\domain users:x:100: id winadmin uid=10000(NTDOM\winadmin) gid=100(users) groups=100(users),3000004(BAZRTD\group policy creator owners),3000008(NTDOM\domain admins) mem1:~$ getent passwd...

...indows' > troubles, i've troubles accessing CUPS web interface, because i can > login on, but my status of 'SystemGroup' are not granted, even if i'm > a member of 'systemgroup'. > > > > My group output: getent group lpadmin > > lpadmin:x:116:winadmin,otherwinuser,a-linuxuser > > ...but you have added 'locally' (eg, in /etc/group and /etc/shadow) > the user 'winadmin', 'otherwinuser' and 'a-linuxuser'?! > > > If so, clearly works, also for me! But is rather ''unoptimal'', >...

Hai Marco, Ok thats strange, this works fine since Jessie and up. I did some extra checks and i'll show my outputs so you can compaire them. My "domain" admin shows : id winadmin uid=10000(winadmin) gid=10000(domain users) groups=10000(domain users),116(lpadmin),10001(domain admins),2001(BUILTIN\users),2000(BUILTIN\administrators) My group output: getent group lpadmin lpadmin:x:116:winadmin,otherwinuser,a-linuxuser This is my running /etc/nsswitch.conf. passwd: co...

...bin/useradd -d /dev/null -g winwkst - s /bin/false %u ; home directory settings logon path = \\%L\%U\profile logon home = \\%L\%U logon drive = H: ; logon script ;logon script = logon.bat ; map users and groups domain admin group = @winadmin username map = /etc/samba/smbusers nt acl support = no ; load all cups printers printcap name = cups load printers = yes printing = cups ; activate time server time server = yes ; activate wins server wins support =...

...I'm struggeling with the printer setup. Could anybody route me to an detailed step-by-step guide on how to do this right OR maybe explain it to me? What I have is this: ------------------- [print$] comment = Printers ... path = /home/ANDROMEDA/printers write list = @winadmin, root [DeskJet 870Cxi] path = /home/ANDROMEDA/lpspool write list = @winadmin, root printable = Yes printer name = lp --------------------- QUESTION 1: For what purpose do I need the [print$] share? The [DeskJet 870Cxi] - share is visible and accessible on my client...

...mba %v (PDC) interfaces = lo eth0 bind interfaces only = yes hosts allow = 192.168.1.,127.0.0.1 hosts deny = 0.0.0.0/0 # logging log file = /var/log/samba/log.%m # log level = 3 # password smb passwd file = /etc/samba/smbpasswd password level = 1 max log size = 1024 security = user admin users = @winadmin domain admin group = @winadmin encrypt passwords = yes update encrypted = yes restrict anonymous = no null passwords = yes guest account = nobody unix password sync = yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *Please*retype*new*password* %n\n *password*successfully*u...

I was used (in SambaNT/OpenLDAP) to put on CUPS configuration the statement (/etc/cups/cups-files.conf): SystemGroup printops and add to 'printops' group some users that can manage cups. Now i'm in AD mode. I'm in 'printops' group: root at vdmpp1:~# id gaio uid=10000(gaio) gid=10513(domain users) gruppi=10513(domain

...ke_server_info_sam() failed with 'NT_STATUS_UNSUCCESSFUL' [2013/04/11 20:26:01.504397, 1] auth/server_info.c:386(samu_to_SamInfo3) The primary group domain sid(S-1-5-21-3360932306-3333476405-2840157550-513) does not match the domain sid(S-1-5-21-4240919292-2417995422-4236335894) for winadmin(S-1-5-21-4240919292-2417995422-4236335894-302) [2013/04/11 20:26:01.504589, 0] auth/check_samsec.c:491(check_sam_security) check_sam_security: make_server_info_sam() failed with 'NT_STATUS_UNSUCCESSFUL' [2013/04/11 20:26:44.676638, 1] auth/server_info.c:386(samu_to_SamInfo3) The pr...

...aining me well. I've not 'windows' troubles, i've troubles accessing CUPS web interface, because i can login on, but my status of 'SystemGroup' are not granted, even if i'm a member of 'systemgroup'. > My group output: getent group lpadmin > lpadmin:x:116:winadmin,otherwinuser,a-linuxuser ...but you have added 'locally' (eg, in /etc/group and /etc/shadow) the user 'winadmin', 'otherwinuser' and 'a-linuxuser'?! If so, clearly works, also for me! But is rather ''unoptimal'', because i've to setup users for...

Good evening!! How Can I add a user to domain admins group using samba 4 AD + Domain controller?? JOSE FERMIN

...p filter = "(&(uid=%u)(objectclass=sambaAccount))" ldap ssl = yes # Add user script - This will be used to add client computers on the fly # so computers will be able to automatically join the domain add user script = echo # Define our administrators for the computers admin users = @winadmin domain admin group = @winadmin # More stuff to fix our browsing problems between the subnets enhanced browsing = yes #============================ Share Definitions ============================== [homes] comment = Home Directories browseable = no writable = yes valid users = %S cre...

I set up winbind on one box successfully. Now a friend told me that it might be better to use ActiveDirectoriy (the PDC and all other servers are win2000). What is the difference in both approaches? which is 'better'? I feel that ldap is the more general and cleaner solution. Is that true? My windows-admins will get rid of wins soon. does winbind rely on wins? can libnss-ldap also create

...any other cups file. Port 631 ServerName print1.internal.domain.tld ServerAlias * ServerTokens None ServerCertificate /etc/cups/ssl/server.crt ServerKey /etc/cups/ssl/server.key Browsing Off BrowseLocalProtocols none DefaultAuthType Negotiate WebInterface Yes The setup. I've given the user winadmin an uid and gid and ive added winadmin to the unix lpadmin group. And you should be done, setup kerberos auth, and configure through the cups webinterface. Now, add yourself as (your winuser gaio) to lpadmin, do note you must have a uid/gid to make this work. ( dont forget to logout and login aga...

...ap filter = "(&(uid=%u)(objectclass=sambaAccount))" ldap ssl = no # Add user script - This will be used to add client computers on the fly # so computers will be able to automatically join the domain add user script = echo # Define our administrators for the computers admin users = @winadmin domain admin group = @winadmin # More stuff to fix our browsing problems between the subnets enhanced browsing = yes #============================ Share Definitions ============================== [homes] comment = Home Directories browseable = no writable = yes valid users = %S cre...

...this machine is not a domain-master-browser, ; but it has to, since othewise it would not be accepted by some ; windows clients as the PDC. So sorry. GHess 11-Jan-2002 os level = 64 local master = yes domain master = yes domain admin group = +winadmin preferred master = yes ; Nevertheless, we try to move (keep) the wins server to the real ; fileserver with samba-2.2.2. GHess 11-Jan-2002 wins server = samba1 wins support = no wins proxy = no default case = lower preserve...

...erberos part, you only need to add the HTTP/UPN. After a join with winbind you have the host/UPN. I must say that the CUPS setup is working great. Only 1 or 2 problems in almost 2 years. @Marco, > ...but you have added 'locally' (eg, in /etc/group > and /etc/shadow) the user 'winadmin', 'otherwinuser' and 'a-linuxuser'?! Yes, i did add my AD admin user to a local group but only once. And its only for the lpadmin group. Everthing else can be done through windows groups. And yes, you can replace the lpadmin group for a windows group but thats more work imo...

...master = yes os level = 65 domain logons = yes logon script = %U.bat # logon path = \\%N\profiles\%U\nt logon home = \\%N\profiles\%U [home] path = /home/%U comment = %U some directory browsable = no writable = yes [netlogon] path = /usr/local/samba/netlogon valid users = @winlogon write list = @winadmin create mode = 775 force create mode = 775 [profiles] path = /usr/local/samba/profiles comment = user profiles valid users = @winlogon writable = yes browsable = yes force group = %U create mode = 770 force create mode = 770 directory mode = 770 force directory mode = 770 ________________________...

Hi out there, i intend to run multiple Instancies of Samba on a single, multi-homed, server, with each instance bound to a specific (logical) interface. If this works, it would be fine to me. Mainly for administrative Reasons. (You won't believe, but from time to time it becomes necessary to restart some services, but restarting the entire server is a real mess) Well here my