similar to: Problems joining administrator-group

I'm trying to use my samba as domain controller and logon-server for my WinXP-client. I can see all the shares, and get access to them using user/password, but when trying to join the domain, it fails with "The specified user does not exist", even though it does. The server-log says "smbd/server.c:exit_server(458)". Can anyone help? ---------------------- Martin Burheim

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > Date: Wed, 30 Apr 2003 16:33:16 +1000 > From: Lance Rathbone <l.rathbone@imb.uq.edu.au> > To: samba@lists.samba.org > Subject: [Samba] Samba PDC/LDAP how to get Win2000 Administrator account? > Message-ID: <p05100303bad51ce40e4a@[130.102.118.14]> > In-Reply-To:

I was previously using 2.2.8 and had 'domain admin group = @smbadmin' set making anybody in the smbadmin group an administrator. However, with samba-3.0 that went away. So, I set 'admin users = @smbadmin name1 name2...' but it doesn't give my users administrative privilege. The logs seem to indicate that the account has administrative privileges but they do not.

Is there more documentation for smbgroupedit than the manpage ? I'm trying to get the domain admins group to work. Steps i taken so far 1. create a unix group domadm 2. add my admin users to the domadm group 3. map the Domain Admins Group to the domadm group 4. make the domain admins group a domain group (smbgroupedit reported it as unknown) 5. remove all domain users and groups from the

Hello, I've been using samba-3alpha22 as a PDC authenticating against LDAP. I am trying to add NT Groups using the smbgroupedit utility. It seems to me that smbgroupedit always looks in /etc/group and does not take into account the ldap configuration options specified in smb.conf. The relevant ldap entries are: passdb backend = ldapsam:ldap://ebola/ ldap suffix="dc=datasoft,

On win XP Pro workstations it would be so convenient if the domain logon script which is stored on the samba pdc could be made to run with Administrative (or System) privileges. I know that I can interactively run another security context by choosing "run as user" but how could I achieve this non-interactively and domain wide whilst a "limited account" is loggin in? Thanks

hello, I would say that for Samba 3.0 alpha20 (and latter I suppose ) acting as PDC you must reenable "use spnego=yes". I say it because it is not clear, and I had to search a lot before finding why i could not log on. (it work with spnego=no with alpha17 !) I've tried to set up add and delete scripts for everythings : add user script, delete user script etc... add/del user and

Hi all, I need help. I read the following documentation on the Samba website : 4.3.1. How do I configure an account as a domain administrator? This has changed in the latest version of the HEAD branch. The "domain admin users" and "domain admin group" parameters have gone away. See the smb.conf man page for information on * domain group map * domain user map * local group

hi list, i am playing with samba 3.0 alpha 17 from cvs 20020701 and global groups running as pdc. i installed to /usr/local/samba30 (having the lock dir under /var/lock/samba30). i mapped some unix groups, but the dont appear as global group. on the w2k sp1 machine. i have also no domain admins right. the domain logon itself works fine. any ideas? btw: swat doesnt not work for me, it

We'd like to add an adm (administrative template) to our Samba4 server. I see where the .adm files are in the filesystem - /opt/s4/var/locks/sysvol/micore.us/Policies/{ED429C7D-156A-4F75-B21D-92DB8E10ACAB}/Adm/conf.adm - but how can I add a new ADM file? The ADM file in question allows the controlling of IE Favorites and a few other items on XP (not available in the default templates for

Hello List-Friends ;-) O.K. I am a real beginner, so please don't hurt me ;-) but im still working since a few days to get it running and google is my best friend. I also bought O'Reilly 's Samba Book and a lot of other online stuff, but AD-Samba-winbind should be too new. I use Suse 9.1 and Samba 3.0.4 as ADS Member Server. We have an W2k Advanced Server (and a M$-Admin which

Hi, Now that we have successfully moved a first department share on to our mega SAMBA server, we're in the 20% of the old 80/20 rule. Our problem has to do with group permissions within the extended acl. We have implemented winbind along with the ADS security mode. This means that a user isn't just "jdoe", but is "MYDOMAIN\jdoe". We are using the extended ACL

A summary of my problem, I had wrong UIDs for a user (eg pmal) between the /etc/passwd file and the smbpasswd file. When I was trying to loggin from a couple of machines running either win nt or win 98 I was reading in the log files that the loggin could not be completed because the UID were wrong but there were instances were I could loggin from another computer with the same username. I really

Hi, I have set up a samba server with ldapbackend and now I'm tryng to join a windows XP machine to the domain. Every time go through the steps of joining thr domain I get "Access Denied". I've configured samba to use ldap and alredy done smbpasswd -w <ldap password> so that it can read the ldap database. So when I try to join the domain by doing right click on "My

Hello all, I'm having an issue with group permissions which I really find hard to understand why. I have created a group called smbusers which I am a part of by doing the following: # groupadd smbusers# usermod -G smbusers michael I then created a directory called foodir, owned by adm with group smbusers and give the following permissions to it: 770 I verify the permissions are correct and are

Hello all, Re-sending due to incorrect mapping of linefeeds from hotmail. I'm having an issue with group permissions. I have created a group called smbusers which I have added myself to, with the following commands: # groupadd smbusers # usermod -G smbusers michael I then create a directory called foodir, owned by adm with group smbusers. Permissions are correct (770) but I cannot access

Hi, If I need some "Domain Users" to have local "Power Users" privileges what is the best way? - convert the local Power Users group to a domain group on the PDC with "smbgroupedit -c<...> -td" Not really knowing the consequence of that change I refrained from doing it. It seems (from searching on Google) that "Power Users" is only a local

Hello, I want to migrate a server from redhat9 with samba (3.0.11) using smbpasswd file to regiter account to ubuntu server (8.04 hardy hearon) with ldap (samba 3.4.5). First I have got the original sid and modify i for all entries in ldap To migrate machine account I insert in ldap id and NTPassword found in smbpasswd. Example:

Hi Frederik, > I provisioned a new domain with "--use-rfc2307" as I want to use the > "ad" idmap backend on my domain members. unless you have really specific requirements, you should really stick with RID mapping, it will be easier on the long run. > I am thinking of mapping the "Administrator" account to UID 10000 > (this is where my UID range for

Hello, I'm Nicol?s from Uruguay, I work in ASSE (public health services), the enterprise has lots of buildings all over my country, more than 100, with thousands of employees and PCs. Until now there is no "network configuration" in PCs (no network users, etc) and I'm trying to solve that out. I started working with samba about one year ago (I've been learning a lot), I