similar to: Groups and LDAP

I'm trying to map my LDAP groups to Windows Groups, but I'm not having any luck. Here is a group I'm trying to map: dn: cn=dom_admin,ou=Groups,dc=wdselab objectClass: sambaGroupMapping objectClass: posixGroup gidNumber: 1000 cn: dom_admin memberUid: dom_admin description: Domain Admininistrators Group sambaSID: S-1-5-21-835892245-73647866-3919785651-512 sambaGroupType: 2 but when I

I am using Samba PDC with OpenLDAP2 and smbldap-tools. As part of my logon.bat, I call a script called ifmember.exe. This script can list out the groups a user is a member of. It is reporting that my root user is a member of the group 'engr.' I don't know if this is a bug with ifmember.exe or if it's an issue in Samba or in LDAP. Here is some relevant data:

Stephanie, Thank you for your help. I tryed what you suggest but no luck.. I get this: root@lnxsrvr2:~# /usr/local/samba/bin/net groupmap add ntgroup="Domain Admins" unixgroup="Domain Admins" rid=512 Can't lookup UNIX group Domain Admins Is there something with initial compiling samba 3.0.0 that would disable this? All the documentation that I've seen makes it look so

I'm trying to iron out all the problems on my PDC. It's setup with a LDAP backend that's replicated to an ldap slave/BDC. Here's the problem: # smbldap-groupshow 'domain admins' dn: cn=Domain Admins,ou=People,dc=strozllc,dc=com objectClass: posixGroup,sambaGroupMapping gidNumber: 512 cn: Domain Admins memberUid: Administrator,root,astanley description: Netbios Domain

This is part of a larger post that was maybe too complicated for me to get the right answer, so I'm breaking it down and will do it bit by bit. Server is Samba-3 PDC, clients are NT4 & XP. I can join the domain using root credentials (so the add machine script works), but not when using 'administrator'. unixuser 'administrator' has primary unixgroup 'ntadmins'.

I can NOT find any information on how to get the following into the LDAP tr= ee (and where they should be located) from the documentation. I am definite= ly an LDAP beginner and assembling the tree from reading schema's is still = over my head. I am able to connect to samba using only LDAP authentication = and can add users, but that is all I can successfully do, "net groupmap add=

Hello all, I could not find anything in the discussion groups or documentation about using LDAP and Unix group mappings. The documentation states that in order to map unix groups to samba groups, you need to use the net group add command. However, I have an ldap backend and all my groups, that I care about are in LDAP. So I have a group called mainwdev. dn:

-- John H Terpstra Email: jht@samba.org ---------- Forwarded message ---------- Date: Tue, 30 Dec 2003 04:33:24 +0000 (GMT) From: John H Terpstra <jht@samba.org> To: Sundaram Ramasamy <sun@percipia.com> Cc: samba@lists.samba.org Subject: Re: [Samba] suse 8.2 Samba 3 LDAP Domain Join Error : Logon failure: unknown user name or bad password On Mon, 29 Dec 2003, Sundaram Ramasamy

When doing a vampire all my PC's are shown in the resulting log as being members of the Domain Users group and none of my "real users" are shown yet in Ldap all my users are shown with memberUid in the domain users group and no computers are shown eg: dn: cn=Domain Users,ou=Groups,<snip> objectClass: posixGroup objectClass: sambaGroupMapping gidNumber: 513 cn: Domain Users

Hi I got a problem with groupmapping. It doesn't work correct: Wilma2:/home/root # net groupmap list | grep 512 Domain Admins (S-1-5-21-3371203057-3264423045-2392767973-512) -> domadm ldapsearch -x cn=domadm: # domadm, groups, wms-hn.de dn: cn=domadm,ou=groups,dc=my-domain objectClass: posixGroup objectClass: sambaGroupMapping cn: domadm gidNumber: 65669 memberUid: tilo sambaSID:

Hi, I'm newbie with Samba. I'm using Samba-3.0 directly installed with Fedora core. I've made a PDC linux server with Samba-3.0, openldap-2.1.22 with pam_ldap everything seems to be good but not with net groupmap. when using command: "net groupmap list" I have the following error : [2003/12/15 17:52:15, 0] passdb/pdb_ldap.c:ldapsam_setsamgrent(2048) ldapsam_setsamgrent:

This is probably pretty simple. The following error appears in my logs since upgrading from version 2.2.8 to 3.0.1: [2003/12/25 14:44:09, 0] rpc_server/srv_util.c:get_domain_user_groups(372) get_domain_user_groups: primary gid of user [testuser] is not a Domain group! get_domain_user_groups: You should fix it, NT doesn't like that I'm guessing that my user's primary group

I have been trying to figure out what this error is: Jan 29 18:23:07 dc2 smbd[20729]: [2004/01/29 18:23:07, 0] rpc_server/srv_util.c:get_domain_user_groups(371) Jan 29 18:23:07 dc2 smbd[20729]: get_domain_user_groups: primary gid of user [barbara] is not a Domain group ! Jan 29 18:23:07 dc2 smbd[20729]: get_domain_user_groups: You should fix it, NT doesn't like that Jan 29 18:23:08 dc2

samba 3.0.2 smbldap-tools 0.8.4 RH 9 nss_ldap configured pam_ldap NOT configured LDAP passwd backend winxp pro domain member Hello, i've configured smbldap-tools in smb.conf to manage users from usrmgr.exe. It works at group creation but have a strange behavior in user creation. In the LDAP there are two manually created accounts; Administrador & invitado, both posixAccount and

I have tried to create a samba domain with a ldap backend. This is how my ldap structure looks like. # example.com dn: dc=example,dc=com objectClass: dcObject objectClass: organization o: example dc: example # groups, example.com dn: ou=groups,dc=example,dc=com objectClass: organizationalUnit ou: groups # Domain Admins, groups, example.com dn: cn=Domain Admins,ou=groups,dc=example,dc=com

Hi, I have setup samba 3.0.7 with LDAP and NetApps Filers as our file store. We are going to lots of departmental shares, firstly we want only people from their own dept to have access to their department share, but users from other departments may need access to other dept shares, i would like to set up permissions on each dept share so a group is applied, then every user is added to the

Relevant part of "net3 groupmap list" is System Operators (S-1-5-21-1617713866-2789119093-1479812082-1007) -> sys In howto there is the following example net groupmap modify ntgroup="System Operators" unixgroup=sys net groupmap modify ntgroup="Power Users" unixgroup=sys You can add System Operators but trying to add Power Users fails. If you do it in reverse

Hi, Thanks for your information. Now I was not able to login as domain user. I am getting following error message. The system cannot log you on now because domain TECHGROUP is not available. Here is my ldap log message:- Dec 28 00:31:08 rishi slapd[1753]: conn=93 fd=17 ACCEPT from IP=::1 1230 (IP=:: 389) Dec 28 00:31:08 rishi slapd[2166]: conn=93 op=0 BIND

Hi All, I'm wondering if anyone can shed some light on a problem I'm having. I have a samba PDC with an LDAP backend, keeping the smb.conf file constant, When I have /etc/nsswitch.conf configured with groups: files ldap Then /usr/local/samba/bin/net rpc user info dbb only returns my primary group. If I have /etc/nsswitch.conf configured with groups: files nis Then all

Hopefully I can write this out so someone understands it. We are currently running a number of Solaris servers, to which windows computers need to connect. Currently they connect via NFS using hummingbird's NFS client. This requires them to have a separate unix account along with their windows account. Our idea is to implement samba 3.0.0 to eliminate that NFS client. My current