similar to: Head Domain Admins Group

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > Date: Wed, 30 Apr 2003 16:33:16 +1000 > From: Lance Rathbone <l.rathbone@imb.uq.edu.au> > To: samba@lists.samba.org > Subject: [Samba] Samba PDC/LDAP how to get Win2000 Administrator account? > Message-ID: <p05100303bad51ce40e4a@[130.102.118.14]> > In-Reply-To:

I tried to use samba 3.0.2alpha in a ldap environment ( netscape 4 diretory server ) with xp sp1 and window 2000 server as client. I followed the ignacio coupeau tutorial's. I have some questions about samba 3 architecture and nt 2000 in general. Ignacio coupeau have 2 domain's logon, with exactly the same configuration. it seems to work on my lan but I'd like to understand how. I

Hello all, Let me say first I'm very new to Linux (only had it running 3 days), so bear with me if I'm a bit ignorant. I'm unsure if I should even post this here, or if this list is exclusively for hardware issues... I'm running into difficulties (on a win2k client) adding the Samba "Domain Admins" group to the Windows "Administrators" group. I am able to log

Hi, I have some strange problems with 3.0a21 PDC (samba and nss use both ldap) and I can't find any good help with google... One strange thing is that logon script does'nt work anymore, it worked at one point and now doesnt (I quite play around here and I dont know in which point of changing smb.conf it stopped to work). [netlogon] share is like that: [netlogon] comment = Network

Hi I got a problem with groupmapping. It doesn't work correct: Wilma2:/home/root # net groupmap list | grep 512 Domain Admins (S-1-5-21-3371203057-3264423045-2392767973-512) -> domadm ldapsearch -x cn=domadm: # domadm, groups, wms-hn.de dn: cn=domadm,ou=groups,dc=my-domain objectClass: posixGroup objectClass: sambaGroupMapping cn: domadm gidNumber: 65669 memberUid: tilo sambaSID:

Hi, Before Samba 3.0.0 RC4 I was running Samba 3.0.0 beta3, and when I upgraded to RC4, I began having problems with group mappings. I didn't notice at first, because on my laptop I don't normally log on to the domain. I just noticed when I tried to use my desktop and log on to the domain... I don't have Domain Admin privileges. So, I look at 'net groupmap list' ... and it

Hello All! I'm trying to troubleshoot a domain admin problem and I'm stuck at a log error msg. The log says the following: get_domain_user_groups: primary gid of user [root] is not a Domain group ! get_domain_user_groups: You should fix it, NT doesn't like that My goal is so that anyone in the "Domain Admins" group (by default) have administrative access to all

I'm working with Samba 3 on my Gentoo box. So far setting up andconfiguring Samba w/ldap and krb5 support is pretty straight forwared. My Gentoo box is now a member server of the domain, shows up in Active Directory. I can get a kerbereos ticket from our W2K PDC and connect to windows shares with as little effort as: smbclient //server/share -k Now I'm ready to start moving into

Hello all, I am having a some problems with groups. If I use this command "net rpc group list -Uroot%not24get" as the root users I get an error. "Could not connect to server 127.0.0.1 The username or password was not correct" If I try to add groups I also get the same error. and I don't know if this is relevent or not but when I try to join win groups and Unix groups

I have a new Debian testing machine running the Debian Samba 3.0.5. Everything seems OK except that I cannot get users to have domain admin rights. I have Windows XP workstations. The workstations join and log onto the domain fine. A "net groupmap list" yields: server:/home/tnolen# net groupmap list System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1 Guests

Hello all, I am having a some problems with groups. If I use this command "net rpc group list -Uroot%not24get" as the root users I get an error. "Could not connect to server 127.0.0.1 The username or password was not correct" If I try to add groups I also get the same error. and I don't know if this is relevent or not but when I try to join win groups and Unix groups

How does one create all of the builtin groups for this release? When using tdbsam with previous releases one would automatically get such groups as: System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> -1 Domain Admins (S-1-5-21-1832519723-2688400599-3493754984-512) -> domadmin Domain Guests (S-1-5-21-1832519723-2688400599-3493754984-514)

hi list, i am playing with samba 3.0 alpha 17 from cvs 20020701 and global groups running as pdc. i installed to /usr/local/samba30 (having the lock dir under /var/lock/samba30). i mapped some unix groups, but the dont appear as global group. on the w2k sp1 machine. i have also no domain admins right. the domain logon itself works fine. any ideas? btw: swat doesnt not work for me, it

Hello, Can anybody please help me with the following errors. Whenever a user from the group "accounting" logs in the the PDC, a login box pops up and the following message appears "Accessed Denied - Accou~!n.bat". The problems seems to ly with people who belong to the accounting group and are running Win98se on the desktop. Absolutely nothing has been changed on the system.

Hello *, i've got a debian samba 3.0alpha23 with ldapsam. my problem is that i can't set directory permissions. i alwasy get access denied. what i have: svpdc:/etc/samba# smbgroupedit -v params.c:Parameter() - Ignoring badly formed line in configuration file: ldap trust ids NT group (SID) -> Unix group System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1

Hello I have been solving a problem how to make a nonroot user able to administer the domain (add users, groups, modify them etc.) from Windows workstation using usrmgr.exe It looks like what is stated in Samba HOWTO collection as prerequisites is not enough. First I found Chapter 12 cxl "How to make Samba PDC users member of the Domain Admins group" - made the nonroot user member of

Hi, I have Samba 3 as Domain controller. From a Windows 2000 Professional I share a folder (c:\test) with access permission for certain domain user (MYDOMAIN\yo). I can access to that folder from other w2000 with that user validated into it. If I add that user to a unix group (domadm) and map this group to Domain Admins (net groupmap modify ntgroup="Domain Admins"

Hello, At one time I installed an alpha of samba-3.0 and it had a smbgroupedit command that mapped unix and windows groups via webmin. This seems to be missing in beta3, has it been depreciated? Also I can't seem to get the group map to take effect unless the unix group is the users primary group. Either that or I don't understand something. I do not have winbindd running or any idmap

Ok- very odd behavior here. Our Samba 3.0.0 server was happy as a clam, domain admins were recognized by client systems. We rebooted the server recently- the only real change we've made to it- and now, domain admins aren't recognized. However, I was able to use a user who is supposed to be a domain admin to join a machine to the domain(!) Imagine my surprise when Windows Update

Hi All, Just a general question about groups. I am upgrading a Samba workgroup, server to a PDC. I have been reading: http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/groupmapping.html#id2589321 In this link, they tell of how to map a windows group to a Samba group net groupmap add ntgroup="Domain Admins" unixgroup=domadm rid=512 type=d Question 1: if my previous