similar to: general questions about samba 302alpha

Does anybody know more about groups? I am considering switching from NT to Samba domain and have made some test. Unfortunately I need to make two additional groups, except Domain Admin (one of them is Domain Users). Is it possible to make that with the stable version of Samba? And another, but not so important (for now) question. Currently I have a Samba server, providing files and printers

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > Date: Wed, 30 Apr 2003 16:33:16 +1000 > From: Lance Rathbone <l.rathbone@imb.uq.edu.au> > To: samba@lists.samba.org > Subject: [Samba] Samba PDC/LDAP how to get Win2000 Administrator account? > Message-ID: <p05100303bad51ce40e4a@[130.102.118.14]> > In-Reply-To:

Folks, I some very basic questions with regard to Samba and LDAP backend account database use. I am familiar with LDAP and have been using ldap for a while now to store info for a variety of services. I have been using Samba as a stand alone file server with user account info in /etc/passwd for a while as well. I am now trying to build samba 3.3.0 as a standalone, non PDC, on solaris 10 using

Hello, I have a question about the documentation of the Samba Howto's. Specifically, I am not able to understand how group mapping ties into LDAP. I believe I understand the concept of unix to windows group mapping as laid out in chapter 12 as it relates a tdbsam, but get confused when dealing with a ldapsam back-end. There is a note listed " When the passdb back-end uses LDAP

Hi all, another French guy learning, don't bash me too hard... ;-) In fact, I'm in need of a confirmation : I'm on the way to create a Samba3+LDAP (new schemas) PDC server (no migration from NT4 nor 2K, only from an old Samba 2.0 with security=user using /etc/passwd, ie. no encrypt password). This Samba3 should be hosted on a FreeBSD 4.8 (ie. pam_ldap can work, I tested it today, but

hi list, i am playing with samba 3.0 alpha 17 from cvs 20020701 and global groups running as pdc. i installed to /usr/local/samba30 (having the lock dir under /var/lock/samba30). i mapped some unix groups, but the dont appear as global group. on the w2k sp1 machine. i have also no domain admins right. the domain logon itself works fine. any ideas? btw: swat doesnt not work for me, it

Hello *, i've got a debian samba 3.0alpha23 with ldapsam. my problem is that i can't set directory permissions. i alwasy get access denied. what i have: svpdc:/etc/samba# smbgroupedit -v params.c:Parameter() - Ignoring badly formed line in configuration file: ldap trust ids NT group (SID) -> Unix group System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1

Is there more documentation for smbgroupedit than the manpage ? I'm trying to get the domain admins group to work. Steps i taken so far 1. create a unix group domadm 2. add my admin users to the domadm group 3. map the Domain Admins Group to the domadm group 4. make the domain admins group a domain group (smbgroupedit reported it as unknown) 5. remove all domain users and groups from the

Please help me im install samba 3.24 with ldap support: smbclient write error: [root@bene bin]# ./smbclient -L mmm -U murphy doing parameter ldap ssl = no doing parameter workgroup = murphy doing parameter netbios name = mmm handle_netbios_name: set global_myname to: MMM doing parameter comment = Linux RedHat Samba Server doing parameter security = user doing parameter null passwords = Yes doing

Hi ! *Any* sugestions are welcome: I have problem with my samba+LDAP setup (2 weeks now :-(((( ) with the joining of win2k workstations to the samba PDC domain. Every user in the ldap can access his share in the PDC. for instance the users xpto access's without any problem to the \\PDC-SRV\xpto if i add the wks account with the script before trying to join the domain: smbldap-useradd.pl

I''m successfully using HTB + GRED to shape traffic based on the DSCP field. I would like to strip the DSCP and possibly replace it with normal ToS bits on egress traffic leaving my network. Leaving DSCP set is pointless, and could potentially cause problems with some ISPs that use DSCP internally I suppose. Setting ToS bits would seem ideal as most networks still honor it to varying

Buchan Milne wrote: > > Ignacio Coupeau wrote: > >>Buchan Milne wrote: >> >>>Hi, I was following some of the howto at >>>http://www.unav.es/cti/ldap-smb/ldap-smb-2_2-howto.html#patches to >>>include the ldap referral patches in the samba packages for Mandrake, >>>but it seems that samba does not compile with the patch (I can give you

Hello All! I'm trying to troubleshoot a domain admin problem and I'm stuck at a log error msg. The log says the following: get_domain_user_groups: primary gid of user [root] is not a Domain group ! get_domain_user_groups: You should fix it, NT doesn't like that My goal is so that anyone in the "Domain Admins" group (by default) have administrative access to all

Hello, At one time I installed an alpha of samba-3.0 and it had a smbgroupedit command that mapped unix and windows groups via webmin. This seems to be missing in beta3, has it been depreciated? Also I can't seem to get the group map to take effect unless the unix group is the users primary group. Either that or I don't understand something. I do not have winbindd running or any idmap

Hi, I found your posting below... I am in a very similar situation and just want to understand what this means a little better. I have compiled openldap and samba on a netbsd box... Not sure if your aware, but nsswitch on netbsd is not modular, and ldap is not an option for the name service backend. (freebsd and linux are not options since its not an x86 box I'm using) Anyway, my ldap

I need to map all of my NT id's to unix usernames. It looks like you can use NIS groups in the username map file. Why can't you put an NT group in there? Shouldn't I be able to map an entire NT group to a single unix id? Danny Travis danny.travis@exxonmobil.com

I have ACL's enabled and am getting a new error, in the Samba log (V 3.0.1Pre1, when attempting to set permissions on a file through Win2000: get_domain_user_groups: primary gid of user [terry] is not a Domain group ! get_domain_user_groups: You should fix it, NT doesn't like that Do I need to create a group on the windows(2000) side? The entries in the domaingroup.map

I spent a solid two weeks trying to make a RH 9 with Samba 3 PDC operate the way I wanted it to in a domain that includes an NT 4.0 PDC. Early this morning, the NT user dogbreath belonging to the NT group mongrels was able to log into the NT PDC, map to the big_ugly_dogs share on the Samba machine, copy a file there, open it in OpenOffice 1.1.0, edit it, save it and then delete it. All of this was

Hi, I've posted this question before, but i'm still scratching my head. I've got a samba 3 cvs server with an ldap backend. When I do a search for users in a group either by net group <group> /domain or in user manager it returns access denied When I look at the logs on the server samba is searching for (uid=<group>(objectclass=sambaAccount)). The samba schema does not

few day ago, i've asked about mapping unix-windows groups under samba 2.2.7a. now, i know that it is impossible. so i've changed samba on my PDC to 3.0 version (smbgroupedit). but still i've got problems with groups. before - from another machine when i've used 'wbinfo -g'i've got response from my PDC: Domain Admins Domain Users after change to samaba 3.0 with the