similar to: Samba PDC/LDAP how to get Win2000 Administrator account?

hi list, i am playing with samba 3.0 alpha 17 from cvs 20020701 and global groups running as pdc. i installed to /usr/local/samba30 (having the lock dir under /var/lock/samba30). i mapped some unix groups, but the dont appear as global group. on the w2k sp1 machine. i have also no domain admins right. the domain logon itself works fine. any ideas? btw: swat doesnt not work for me, it

Hello *, i've got a debian samba 3.0alpha23 with ldapsam. my problem is that i can't set directory permissions. i alwasy get access denied. what i have: svpdc:/etc/samba# smbgroupedit -v params.c:Parameter() - Ignoring badly formed line in configuration file: ldap trust ids NT group (SID) -> Unix group System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1

Is there more documentation for smbgroupedit than the manpage ? I'm trying to get the domain admins group to work. Steps i taken so far 1. create a unix group domadm 2. add my admin users to the domadm group 3. map the Domain Admins Group to the domadm group 4. make the domain admins group a domain group (smbgroupedit reported it as unknown) 5. remove all domain users and groups from the

Hello All! I'm trying to troubleshoot a domain admin problem and I'm stuck at a log error msg. The log says the following: get_domain_user_groups: primary gid of user [root] is not a Domain group ! get_domain_user_groups: You should fix it, NT doesn't like that My goal is so that anyone in the "Domain Admins" group (by default) have administrative access to all

Hello, At one time I installed an alpha of samba-3.0 and it had a smbgroupedit command that mapped unix and windows groups via webmin. This seems to be missing in beta3, has it been depreciated? Also I can't seem to get the group map to take effect unless the unix group is the users primary group. Either that or I don't understand something. I do not have winbindd running or any idmap

I need to map all of my NT id's to unix usernames. It looks like you can use NIS groups in the username map file. Why can't you put an NT group in there? Shouldn't I be able to map an entire NT group to a single unix id? Danny Travis danny.travis@exxonmobil.com

I have ACL's enabled and am getting a new error, in the Samba log (V 3.0.1Pre1, when attempting to set permissions on a file through Win2000: get_domain_user_groups: primary gid of user [terry] is not a Domain group ! get_domain_user_groups: You should fix it, NT doesn't like that Do I need to create a group on the windows(2000) side? The entries in the domaingroup.map

Hi, I've posted this question before, but i'm still scratching my head. I've got a samba 3 cvs server with an ldap backend. When I do a search for users in a group either by net group <group> /domain or in user manager it returns access denied When I look at the logs on the server samba is searching for (uid=<group>(objectclass=sambaAccount)). The samba schema does not

Does anybody know more about groups? I am considering switching from NT to Samba domain and have made some test. Unfortunately I need to make two additional groups, except Domain Admin (one of them is Domain Users). Is it possible to make that with the stable version of Samba? And another, but not so important (for now) question. Currently I have a Samba server, providing files and printers

I tried to use samba 3.0.2alpha in a ldap environment ( netscape 4 diretory server ) with xp sp1 and window 2000 server as client. I followed the ignacio coupeau tutorial's. I have some questions about samba 3 architecture and nt 2000 in general. Ignacio coupeau have 2 domain's logon, with exactly the same configuration. it seems to work on my lan but I'd like to understand how. I

few day ago, i've asked about mapping unix-windows groups under samba 2.2.7a. now, i know that it is impossible. so i've changed samba on my PDC to 3.0 version (smbgroupedit). but still i've got problems with groups. before - from another machine when i've used 'wbinfo -g'i've got response from my PDC: Domain Admins Domain Users after change to samaba 3.0 with the

Hi, I have some strange problems with 3.0a21 PDC (samba and nss use both ldap) and I can't find any good help with google... One strange thing is that logon script does'nt work anymore, it worked at one point and now doesnt (I quite play around here and I dont know in which point of changing smb.conf it stopped to work). [netlogon] share is like that: [netlogon] comment = Network

Is the rid of a user required to be 2*uid+1000 in HEAD when using an ldap backend? Is it still necessary that users also exist in /etc/passwd? I'd like to replace NIS and win NT domain auth with ldap, and want to keep the current unix uid's and the NT rid's, so the migration is transparent to the end users. -david

I applied sp1 and get a message saying that the "a server copy of the profile exists that does not have the correct security. Either the current user or the Administrator's group must be the owner of the folder." the owner of the profile is correct... It works again when I re-image back to pre sp1 there is an event in the security log saying... Logon Failure: Reason: An error

How do I interpret what this mean? @"prfmstrt2+Domain Users" What is prfmstrt2? Is that a group created in /etc/group? I take it the + is a winbind seperator. What is the manner of assigning domain users to have access to a share? Do I still need to create the domain user name in /etc/passwd, assign it to a group in /etc/group? Do I need to use smbgroupedit to make the domain

> > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On Sat, 19 Apr 2003, G. Armour Van Horn wrote: > > > I'm trying to create a single structure that will serve the entire > > organization, using LDAP replication to keep the users and groups > > straight, which has it's own challenges, but the big mental > block here > > is the domains

currently, in order to join a win XP machine to a samba PDC, you have to use the root account (although you can use an smbpasswd and not the linux password). is there any way to set up another account to do this one particular task (one without uid=0)?. if we have users in remote places, i do not want to have to go over to their work station just to log them on the the domain. alsoi don't

Hi, I am evaluating samba with RH 7.3 in a test environment and supposed to go live by end of Sep02, hopefully. I will be replacing file and print server first in a environment of more than 1500 users. I have been reading through massive docs and trying to find out the exact strategy to shoot at. In doing so i have achieved some success, but i definately need further assistance. Apologies, if I

Hello, I've been using samba-3alpha22 as a PDC authenticating against LDAP. I am trying to add NT Groups using the smbgroupedit utility. It seems to me that smbgroupedit always looks in /etc/group and does not take into account the ldap configuration options specified in smb.conf. The relevant ldap entries are: passdb backend = ldapsam:ldap://ebola/ ldap suffix="dc=datasoft,

I'm wondering what the procedure is to propose additions the the Registered Categories list for the FreeDesktop.org menu-spec. I've found that the Game; subcategories currently available are a little lacking in variety. I think two more should be added: ShootingGame and DrivingGame. I'd like to use those in my .desktop files while maintaining standards compliance, so how could I go