similar to: Admin privilages for root in a samba domain on a win2000 box

Hello, I have a test environment with 1 windows 2000 AD domain pdc ( mixed mode install ), 1 linux server ( to become pdc ) and a win xp box to test logon when the migration was completed. The problem is no matter what I try after the migration the win xp's logonserver = windows server not linux server. I have no idea what is going on here. I've listed the process for migration

Hello, Second post: first had logs attached but was too big. I have a test environment with 1 windows 2000 AD domain pdc ( mixed mode install ), 1 linux server ( to become pdc ) and a win xp box to test logon when the migration was completed. The problem is no matter what I try after the migration the win xp's logonserver = windows server not linux server. I have no idea what is going

Firstly I apologise for the length of this query but I am hoping that if I document everything I did someone might respond / be able to help. My Configuration is Samba 3.0.2a as a PDC on Redhat 8. I cannot for the life of me get the "Domain Admins" functionality to work I am hoping that another set of eyes can shed some light on this problem as I have now spent 41 hrs googling /

Hi, I have the group "root" and user "root" who is in the group "root". I have successfuly mapped the unixgroup root to the ntgroup Domain Admins. Command : net groupmap add sid=S-1-...-512 unixgroup=root ntgroup="Domain Admins" type=domain I the LDAP directory samba added the objectclass sambaGroupMapping with the appropriated attributes. Furthermore I

You cannot add one attribute "memberuid" with comma separator. You can add more than one attribute "memberUid" example : ... memberUid root memberUid administrateur memberUid administratror ----------------------------------- St?phane PURNELLE stephane.purnelle@corman.be Service Informatique Corman S.A. Tel : 00 32 087/342467

Hi, -----Original Message----- From: John H Terpstra [mailto:jht@samba.org] > "domain admin group" removed > > Because you now have something much more powerful that provides real NT > Groups to your NT/200x/XP clients. But if I use LDAP for both Samba and system auth. The groups, what I added with base.ldif (idealx) exist in samba and system. for example "getent

I've got a Fedora Core 2 box running Samba smbd version 3.0.7-2.FC2. I've set it up as a Domain master for a new domain. I setup a Win2K Server box and had it join the domain. I made an "administrator" user, I mapped the groups via: net groupmap modify ntgroup="Domain Admins" unixgroup=admins net groupmap modify ntgroup="Domain Users" unixgroup=users I

Dear all I have smb+ ldap setup not everything is fine but i want to assign some right to perticuler Group so they can change TCP/IP properties and change system time and do some other right Is it possible to give some privilages to normal users ??? $ cat ~/satish/url.txt http://www.linuxbug.org

Hello, i have some problems migrating a Windows 2000 PDC to a Debian GNU/Linux Samba Server, i want to migrate it to a LDAP backend.. but as i'm kind of newbie with ldap and samba migration stuff, i preffered to migrate it to tdbsam first and try it for a while, if everything works fine, then switch to a ldap backend. The problem is that Essential Windows Groups are automatically created, so

Considering the following page... http://us3.samba.org/samba/docs/man/guide/small.html First of, my compliments to John for some great examples to study. In my mind I see three levels of security: 1) Linux - such as SSH'ing into the Linux server, Linux accounts and groups come into play here 2) Samba PDC - "Domain Admins" "Domain Users" come into play here. Examples

Im working on a samba server, debian box, samba version 3.2.5-4lenny9 I?ve added some users to the group g_staff, but it seems? not to work. Also tried to map the groupmap to unixgroup with command: net groupmap [modify/add] ntgroup="Domain Admins" unixgroup=g_staff type=domain and again, cant add admins rights to group g_staff, tried a lot of others stuff, but all of them

Hello list last week we upgraded a 2.2 samba installation to the latest 3.024 release (with CUPS as printing backend). till now we granted some users the right to cancel printer queues from others with 'printer admin = printadmins' in smb.conf. I read through the changes-list and realized that 'printer admin' is now deprecated. I read through the Samba-book, the Howto-sections

Hi, We have a Windows Domain and a few Linux boxes on which we have installed Samba and set them up so people can log in using their windows domain logins using winbind etc. All is working fine EXCPECT for the group memberships. I have a windows user who is a member of the "Domain Admins" group and I want them to have root privilegdes on the UNIX box. I added a group mapping using

We have bumped into a most odd problem. Server: Debian Etch and their Samba 3.0.24-2 Client: WinXP SP2, MSI v3, all hot fixes The following settings are in place on the server: #!/bin/bash # # initGrps.sh # Map Windows Domain Groups to UNIX groups net groupmap add ntgroup="Domain Admins" unixgroup=domadmin rid=512 type=d net groupmap add ntgroup="Domain Users"

Howdy People, I have a problem with roaming profiles in samba 3.0.5 on redhat9 ( installed from the rpm with rpm -Uv samba.3.0.5.rpm I am not using LDAP ( dont know how and as I am a Netware person on a very steep learning curve with Samba, didn't want to complicate the installation after seeing every second posting on this list as a ldap problem). The smb.conf file is listed below. The

Hello I have been solving a problem how to make a nonroot user able to administer the domain (add users, groups, modify them etc.) from Windows workstation using usrmgr.exe It looks like what is stated in Samba HOWTO collection as prerequisites is not enough. First I found Chapter 12 cxl "How to make Samba PDC users member of the Domain Admins group" - made the nonroot user member of

Dear all, When I create a share with the "admin users" permission (see smb.conf) and map a drive to it from win2k, it does not allow me to: Edit files Create files Remove files Add Directories Remove Directories Each time it gives me a permissions error. And I ever tried adding user1 to the UNIX group that maps to the Windows Domain Admins group: net groupmap modify

Just setup a new domain controller running Samba-3.0.20b. Using smbpasswd file (no LDAP). How do I setup a group of users so they become domain administrators? I thought I just typed this: % net groupmap modify ntgroup="Domain Admins" unixgroup=ntadmin I am in group unix ntadmin, but I'm it doesn't seem to work. Michael -- Michael Keightley

Relevant part of "net3 groupmap list" is System Operators (S-1-5-21-1617713866-2789119093-1479812082-1007) -> sys In howto there is the following example net groupmap modify ntgroup="System Operators" unixgroup=sys net groupmap modify ntgroup="Power Users" unixgroup=sys You can add System Operators but trying to add Power Users fails. If you do it in reverse

Hello All, Samba is posting the following error messages repeatedly during user authentication: Feb 20 09:35:50 SUMSRVR smbd[27950]: [2007/02/20 09:35:50, 0] rpc_server/srv_util.c:get_alias_user_groups(206) Feb 20 09:35:50 SUMSRVR smbd[27950]: get_alias_user_groups: gid of user xxx doesn't exist. Check your /etc/passwd and /etc/group files It does not appear to be causing any problems,