similar to: Réf. : Net groupmap fails

I have yet to get group mapping to work in samba 3.0. Getting very frustrated. I'm using openldap 2.1.23 as the backend database for samba 3.0.0. I've added the base domain groups as posixAccounts to the LDAP database using smbldap-populate.pl. root@lnxsrvr2:/usr/local/etc/openldap# ldapsearch -xv -b "o=30greatneck,dc=home,dc=net" # Administrator, Users, 30GreatNeck, home.net

Should I delete them first? net groupmap list Domain Admins (S-1-5-21-3186189368-1246494298-1334198317-512) -> Domain Admins #NOTE - listed only one for clarity# # net groupmap modify sid=S-1-5-21-3186189368-1246494298-1334198317-512 unixgroup=root type=domain [2003/12/21 20:05:22, 0] passdb/pdb_ldap.c:ldapsam_update_group_mapping_entry(1954) ldapsam_update_group_mapping_entry: No group to

Hi, Same problem for me, any clue ? Gana?l. owen@isrl.uiuc.edu@lists.samba.org on 07/31/2003 01:42:21 AM Envoy? par : samba-bounces+ganael.laplanche=edf.fr@lists.samba.org Pour : samba@lists.samba.org cc : Objet : [Samba] groupmember list fails with 3.0.0b3 and LDAP Hi all, I've been working on a PDC with group mapping with Samba-3.0.0Beta3 with OpenLDAP-2.1.22. Things

do I somehow have to add RID's? [root@linserv2 sbin]# ldapsearch -x -h localhost -b "o=Mullen,c=US" '(cn=Domain Admins)' version: 2 # # filter: (cn=Domain Admins) # requesting: ALL # # Domain Admins, Groups, Mullen, US dn: cn=Domain Admins,ou=Groups,o=Mullen,c=US objectClass: posixGroup objectClass: sambaGroupMapping gidNumber: 512 cn: Domain Admins memberUid:

net groupmap modify ntgroup="Domain Admins" unixgroup=504 net: ../../../libraries/liblber/decode.c:644: ber_scanf: Assertion `((ber)->ber_opts.lbo_valid==0x2)' failed. I was told this may be specific to ldap setup with samba 3.0.0, but is fixed in later versions of samba. however, in 3.0.1, there is a far worse bug that makes machines only available some of the time(i was told

Relevant part of "net3 groupmap list" is System Operators (S-1-5-21-1617713866-2789119093-1479812082-1007) -> sys In howto there is the following example net groupmap modify ntgroup="System Operators" unixgroup=sys net groupmap modify ntgroup="Power Users" unixgroup=sys You can add System Operators but trying to add Power Users fails. If you do it in reverse

Hi, After a successful upgrade from samba3alpha19 to samba3.0.1pre1 I am now doing the group mapping stage. The problem I am having is modifying a group in the LDAP directory. I am using net groupmap modify ntgroup=staff unixgroup=staff type=domain. The error it is coming up with is [2003/10/29 17:21:39, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1615) ldapsam_search_one_group: searching

I'm a little weak on how the groups assignments work with Samba and LDAP. The Samba HOWTO collection says to map each Domain Group to a UNIX system group, but if all authentication is done via LDAP (Unix and Windows) then do the groups still have to exist on the Samba Unix machine? Where do the RIDs fit into all this? I don't see a schema in LDAP for sambaGroup. Do I create the

ok, i noticed the gid of ldap group "users" was 539, but the one it was migrated from in /etc/group was 100, so I changed the gid and everything seems to work now? but why should it care that the gid is the same as it's /etc/group counterpart? --- On Tue 01/27, John H. < mrmailer@myway.com > wrote: From: John H. [mailto: mrmailer@myway.com] To: samba@lists.samba.org

the weirdness continues net groupmap modify ntgroup="Domain Admins" unixgroup="ntadmin" NT Group Domain Admins doesn't exist in mapping DB --- On Mon 01/26, John H. < mrmailer@myway.com > wrote: From: John H. [mailto: mrmailer@myway.com] To: samba@lists.samba.org Date: Mon, 26 Jan 2004 17:40:49 -0500 (EST) Subject: Re: [Samba] net:

I have tried to create a samba domain with a ldap backend. This is how my ldap structure looks like. # example.com dn: dc=example,dc=com objectClass: dcObject objectClass: organization o: example dc: example # groups, example.com dn: ou=groups,dc=example,dc=com objectClass: organizationalUnit ou: groups # Domain Admins, groups, example.com dn: cn=Domain Admins,ou=groups,dc=example,dc=com

Dear Madam/Sir: I downloaded the latest source file (version 3.0.1) and follow = "Manifest" guide to build the binaries, but got failure. OS: Red Hat Linux release 7.3 (Valhalla) Kernel: 2.4.18-3 on an i686 ***** Procedures I did to build: [max@localhost source]$ ls -l configure -rwxr-xr-x 1 max max 973150 Feb 6 10:30 configure [max@localhost source]$ ./configure :

Hi, I'm newbie with Samba. I'm using Samba-3.0 directly installed with Fedora core. I've made a PDC linux server with Samba-3.0, openldap-2.1.22 with pam_ldap everything seems to be good but not with net groupmap. when using command: "net groupmap list" I have the following error : [2003/12/15 17:52:15, 0] passdb/pdb_ldap.c:ldapsam_setsamgrent(2048) ldapsam_setsamgrent:

Hello, I'm using Samba3Beta1 and i try to map group. I create a posix group in my ldap: dn: cn=Administrateurs du domaine,ou=Groups,dc=middleearth,dc=ring objectClass: posixGroup cn: Administrateurs du domaine memberUid: root memberUid: administrateur gidNumber: 1000 And I try to map this group with the nt group : Domain Admins net groupmap add ntgroup="Domain Admins"

OK. I am starting to believe that Samba 3.0.x is not stable. At least, the documentation for Samba as PDC with OpenLDAP backend (which is what I have been trying to do for four days) is crap. All the documentation for 3.0.x is mixed with 2.2.x. Most documents start as instructions for 3.0.x but put a lot of information that doesn't apply to 3.0.x, but 2.2.x. People in the mailing list

well, they both have the same sid, for some bizarre reason. net groupmap list -s /etc/samba/smb.ldap |grep "Admin" Domain Admins (S-1-5-21-4070452498-3149834983-2923667569-512) -> 512 Administrators (S-1-5-21-4070452498-3149834983-2923667569-544) -> 544 Domain Admins (S-1-5-21-4070452498-3149834983-2923667569-512) -> ntadmin and see, it has a posixgroup entry? # LDIF Export

Dear Sirs, I did the following command (against ldapsam backend): net groupmap add rid=3002 unixgroup=wheel type=local ntgroup=Marketoids comment=Mm -d 10 I just wanted to add new group. But instead of that I saw many-many-many records: lib/smbldap.c:smbldap_search(963) passdb/pdb_ldap.c:ldapsam_getgroup(2008) they all wanted to find group with gidNumber=4294967295, yes, sure, there's

Hi There seems to be a discrepancy in the s4 schema concerning security groups. Domain Users comes with gidNumber: 100. This is however contrary to what the schema allows. You can show this as follows: Create a new group. samba-tool group add mygroup. Use phpldapadmin to add the gidNumber attribute. There is an error because gidNumber is provided by the posixGroup class and that objectclass is

Hi! I'm installing Debian Sarge with Samba 3.0.14a-3, OpenLDAP 2.2.23-8, smbldap-tools 0.8.7-4 ( I tried with 0.9.x version also) It isn't the first time I install a system like this but this time I encountered a problem never seen: during user insert I have an error because of smbldap-tools do not find indicated group (but group exists!). So: SambaTesting:~/install#

hi, we recently upgraded from samba 2.2.8a w/ldap to samba3 w/ldap and having troubles with domain group mappings. first symptom is that net groupmap list returns nothing. [root@lola root]# net groupmap list [root@lola root]# if we try to add a groupmapping, the command fails: net groupmap add sid=<sid-gid> ntgroup="Domain Admins" unixgroup=domadm type=domain --debuglevel=4