similar to: samba 3.0 and group mapping

Hiya, I'm using Fedora Test 2 and Samba 3.0.0-15 packages from Redhat/Fedora rawhide with a Windows 2003 Server. I'm also using MIT Kerberos 1.3.1. Everytime winbindd ist started, it writes following error into /var/log/samba/winbindd.log: [2003/10/13 10:13:40, 1] nsswitch/winbindd.c:main(832) winbindd version 3.0.0-15 started. Copyright The Samba Team 2000-2003 [2003/10/13

Hello All! I'm trying to troubleshoot a domain admin problem and I'm stuck at a log error msg. The log says the following: get_domain_user_groups: primary gid of user [root] is not a Domain group ! get_domain_user_groups: You should fix it, NT doesn't like that My goal is so that anyone in the "Domain Admins" group (by default) have administrative access to all

As I learned from former threads, "net ads join" should not only join the Samba server to ADS, but also create Kerberos 5 credentials on the Linux box running Samba 3.0. Well, thanks Jerry joining the Samba 3.0 to ADS works now, but I won't get any Kerberos 5 credentials. winbindd throws errors because of missing Kerberos credentials. Kerberos 5 support is copiled into my samba

Hiya, as I was not capable of getting only close to join the RC1 of Samba 3.0 to my ADS realm, I downgraded to the Redhat 9.0 rpm version of Samba 3.0 Beta 3 from download.samba.org. With this package I get a lot closer to a "working solution". Anyway, Kerberos is not working as supposed during the "net ads join" process which should leave a bunch of Kerberos credentials in

Hi guys, everytime I try to join my Samba 3.0 Beta 3 server to my Windows 2003 ADS domain, net puts out following error: ***** SNIP ***** [2003/08/12 14:33:48, 1] libsmb/clikrb5.c:cli_krb5_get_ticket(343) krb5_set_default_tgs_ktypes failed (Program lacks support for encryption type)net: relocation error: net: undefined symbol: krb5_cc_initialize ***** SNAP ***** This is the full level 10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > Date: Wed, 30 Apr 2003 16:33:16 +1000 > From: Lance Rathbone <l.rathbone@imb.uq.edu.au> > To: samba@lists.samba.org > Subject: [Samba] Samba PDC/LDAP how to get Win2000 Administrator account? > Message-ID: <p05100303bad51ce40e4a@[130.102.118.14]> > In-Reply-To:

Hi, I'm running a Active Directory domain on Samba 4.0.1 and I'm trying to join a Solaris 11 machine this domain: # smbadm join -u Administrator DOMAIN After joining DOMAIN the smb service will be restarted automatically. Would you like to continue? [no]: yes Enter domain password: Locating DC in DOMAIN ... this may take a minute ... Joining DOMAIN ... this may take a minute ... failed

Hiya, I compiled the RPMs of Samba 3.0.0 RC1 according to "../samba-3.0.0rc1/packaging/RedHat/samba.spec" and installed the binaries from the freshly compiled rpm on my up2date Redhat 9.0 Server. The command "net join -U Administrator%****** -d10" creates following error: ***** SNIP ***** [root@samba30srv RedHat]# net join -U Administrator%******** -d10 [2003/08/19

Hello, everyone. I'm trying to make Samba 2.2.2 a PDC for Win2000 clients. I believe that I have set the Linux Samba machine up correctly. For your review, these are the steps that I have taken: * compile Samba 2.2.2 from source, no extra options. * make; make install. (to /usr/local/samba) * groupadd machines (for my machine trust accounts) * groupadd smbadm (samba domain admin group) *

Hello *, i've got a debian samba 3.0alpha23 with ldapsam. my problem is that i can't set directory permissions. i alwasy get access denied. what i have: svpdc:/etc/samba# smbgroupedit -v params.c:Parameter() - Ignoring badly formed line in configuration file: ldap trust ids NT group (SID) -> Unix group System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1

Is there more documentation for smbgroupedit than the manpage ? I'm trying to get the domain admins group to work. Steps i taken so far 1. create a unix group domadm 2. add my admin users to the domadm group 3. map the Domain Admins Group to the domadm group 4. make the domain admins group a domain group (smbgroupedit reported it as unknown) 5. remove all domain users and groups from the

Hello, At one time I installed an alpha of samba-3.0 and it had a smbgroupedit command that mapped unix and windows groups via webmin. This seems to be missing in beta3, has it been depreciated? Also I can't seem to get the group map to take effect unless the unix group is the users primary group. Either that or I don't understand something. I do not have winbindd running or any idmap

I need to map all of my NT id's to unix usernames. It looks like you can use NIS groups in the username map file. Why can't you put an NT group in there? Shouldn't I be able to map an entire NT group to a single unix id? Danny Travis danny.travis@exxonmobil.com

I have ACL's enabled and am getting a new error, in the Samba log (V 3.0.1Pre1, when attempting to set permissions on a file through Win2000: get_domain_user_groups: primary gid of user [terry] is not a Domain group ! get_domain_user_groups: You should fix it, NT doesn't like that Do I need to create a group on the windows(2000) side? The entries in the domaingroup.map

Hi, I've posted this question before, but i'm still scratching my head. I've got a samba 3 cvs server with an ldap backend. When I do a search for users in a group either by net group <group> /domain or in user manager it returns access denied When I look at the logs on the server samba is searching for (uid=<group>(objectclass=sambaAccount)). The samba schema does not

Hi there. I installed OpenSolaris 10 on a test machine, and I'm trying to make it join my samba domain. Unfortunately, the only references I can find about joining a domain on Solaris are related to joining an AD domain. I just want to join a samba domain (Windows NT/2000 style) smbadm -u name DOMAIN always fail with: failed to find any domain controllers for DOMAIN I wanted to experiment

Does anybody know more about groups? I am considering switching from NT to Samba domain and have made some test. Unfortunately I need to make two additional groups, except Domain Admin (one of them is Domain Users). Is it possible to make that with the stable version of Samba? And another, but not so important (for now) question. Currently I have a Samba server, providing files and printers

Hi, When I try to change my Password with XP's Password-Change-Box, I get the following error in log.smbd: [2004/03/21 11:16:06, 0] passdb/pampass.c:smb_pam_chauthtok(709) PAM: UNKNOWN PAM ERROR (19) for User: testuser [2004/03/21 11:16:06, 0] passdb/pampass.c:smb_pam_passchange(865) smb_pam_passchange: PAM: Password Change Failed for user testuser! From my smb.conf: # PDC

I tried to use samba 3.0.2alpha in a ldap environment ( netscape 4 diretory server ) with xp sp1 and window 2000 server as client. I followed the ignacio coupeau tutorial's. I have some questions about samba 3 architecture and nt 2000 in general. Ignacio coupeau have 2 domain's logon, with exactly the same configuration. it seems to work on my lan but I'd like to understand how. I

few day ago, i've asked about mapping unix-windows groups under samba 2.2.7a. now, i know that it is impossible. so i've changed samba on my PDC to 3.0 version (smbgroupedit). but still i've got problems with groups. before - from another machine when i've used 'wbinfo -g'i've got response from my PDC: Domain Admins Domain Users after change to samaba 3.0 with the