similar to: Q about net groupmap examples on samba.org

We have bumped into a most odd problem. Server: Debian Etch and their Samba 3.0.24-2 Client: WinXP SP2, MSI v3, all hot fixes The following settings are in place on the server: #!/bin/bash # # initGrps.sh # Map Windows Domain Groups to UNIX groups net groupmap add ntgroup="Domain Admins" unixgroup=domadmin rid=512 type=d net groupmap add ntgroup="Domain Users"

I am testing out Debian Etch, and ran into an issue granting SeMachineAccountPrivilege to an account... which granting that permission had been troublesome in the past. The command I am issuing is: net rpc rights grant LDS-DEMO\\ldsinst SeMachineAccountPrivilege And I try running the command with an account that is a member of the "Domain Admins" group. The command returns: Failed to

Hello, I have a test environment with 1 windows 2000 AD domain pdc ( mixed mode install ), 1 linux server ( to become pdc ) and a win xp box to test logon when the migration was completed. The problem is no matter what I try after the migration the win xp's logonserver = windows server not linux server. I have no idea what is going on here. I've listed the process for migration

hi, i'm moving from nt4 to samba ( 3.0.7 on suse 9.2). I'm able to join the domain, and roaming profiles work. I used net groupmap to map unix to nt group, this way: System Operators (S-1-5-32-549) -> -1 Domain Guests (S-1-5-21-2839205766-3667556824-2828225164-514) -> nobody Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> ntguests Power Users (S-1-5-32-547)

Hello, Second post: first had logs attached but was too big. I have a test environment with 1 windows 2000 AD domain pdc ( mixed mode install ), 1 linux server ( to become pdc ) and a win xp box to test logon when the migration was completed. The problem is no matter what I try after the migration the win xp's logonserver = windows server not linux server. I have no idea what is going

Hello Mailinglist, I have created a local user "localuser" who is in the local group "localgroup" $ id uid=1001(localuser) gid=1001(localgroup) groups=1001(localgroup) My machine authenticates against Active Directory - works The AD-User "aduser" belongs to a domain group "adgroup" $ id uid=6161(aduser) gid=5513(dom?nen-benutzer)

Hi I have samba 3.0.14a (debian/stable) and wonder where the problem is that running this command: # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=512 type=d gives: adding entry for group Domain Admins failed! but (note changed rid) # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=1000 type=d works fine. Hm, winbind is not working, but I

Hi! I'm experiencing some serious problems setting up Samba as PDC. File sharing works fine and I can even add my computer to the domain, but when I reboot I can't log in with my samba username and password. I've previously set up similiar server, though it wasn't trough VPN. I'm running latest Debian Etch with every package upgraded. I've also tried some older samba

Hi, I think at first you have to do a net groupmap add all the well known Groups. System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> -1 Domain Users (S-1-5-21-3732367786-856876144-3282938955-513) -> -1 Domain Admins (S-1-5-21-3732367786-856876144-3282938955-512) -> -1 Power Users (S-1-5-32-547) -> -1 Domain Guests

Hello, i must admit that i'm totally lost. After working a lot of hours my new samba server is still not running fine. I had read a lot of papers but i have no idea what's going wrong. My goal: --------- Samba 3.0.9 (Fedora Core 2) working as a PDC for windows 2000 professional client (with sp4 and all hotfixes applied) _with_ roaming user profiles. My status: ---------- *

I believe I have everything setup correctly on my RH9 server running Samba 3.0.3.rc1 and openLDAP 2.1.22. I can join computers to the domain and authenticate to the domain without any problems. What I am having problems with is trying to do a group map so Domain Admins have administrative rights on the workstation when they login. I can get this to work on non LDAP setups by issuing net

Firstly I apologise for the length of this query but I am hoping that if I document everything I did someone might respond / be able to help. My Configuration is Samba 3.0.2a as a PDC on Redhat 8. I cannot for the life of me get the "Domain Admins" functionality to work I am hoping that another set of eyes can shed some light on this problem as I have now spent 41 hrs googling /

<rant>Every time I set up a new test Samba server, the step to "net rpc rights grant..." ALWAYS fights me tooth and nail... ALWAYS with a different error message. I've even created little scripts to run so I am not typing commands incorrectly... but NNNOOOOOO, the script to grand rights to one stink'n account always has to complain!</rant> OK, this time it is...

Hi samba list, I'm using samba 3(.0.13) with OpenLDAP and I have a strange problem: the variables %U and %G don't seem to be replaced by their values. I get nothing in my logs, so I don't know where is the problem... In fact, in my smb.conf, I have something like: logon home = logon path = \\server\profiles\prof.%G logon drive = h: The profiles are loaded if I use logon

Relevant part of "net3 groupmap list" is System Operators (S-1-5-21-1617713866-2789119093-1479812082-1007) -> sys In howto there is the following example net groupmap modify ntgroup="System Operators" unixgroup=sys net groupmap modify ntgroup="Power Users" unixgroup=sys You can add System Operators but trying to add Power Users fails. If you do it in reverse

Hi, i can't delete groupmap in my samba 3.0.12: # net groupmap list Domain Users (S-1-5-21-3984604316-2900431957-2958281145-513) -> products Domain Admins (S-1-5-21-3984604316-2900431957-2958281145-513) -> man Domain Admins (S-1-5-21-3984604316-2900431957-2958281145-512) -> domadmin Domain Users (S-1-5-21-3984604316-2900431957-2958281145-513) -> domuser # net groupmap delete

Hi all, I've scoured the net looking for a solution but to no avail. net groupmap list returns Domain Admins (S-############........) -> Domain Admins I would rather map Domain Admins to my root unix group. net groupmap modify ntgroup="Domain Admins" unixgroupreturns type=d returns an error; Could not update group database. If I delete via; net groupmap delete

Hello, Background: I recently upgraded a samba 2.8 system to samba 3.0 dl'ed from samba.org current. Everything works great except the group mapping and some net sessions that get stuck but I want to focus on the groupmap issue today. Things I have done: Delete group_mapping.tdb -- restarted samba -- net groupmap modify ntgroup='Domain Admins' unixgroup=ntadmins -- result: shows

Hi, Before Samba 3.0.0 RC4 I was running Samba 3.0.0 beta3, and when I upgraded to RC4, I began having problems with group mappings. I didn't notice at first, because on my laptop I don't normally log on to the domain. I just noticed when I tried to use my desktop and log on to the domain... I don't have Domain Admin privileges. So, I look at 'net groupmap list' ... and it

yOn Tue, 24 Feb 2004, Vladimir Pekkel wrote: > Dear John. > > I looked through several threads @samba list-server. Still no answer to my > question - How to map several UNIX group to a single "ntgroup" with Samba > 3.0.2 Something identical to old smb.conf entry: domain admin > group=@ntadmins,@admins Samba-3.0.x does not support nested groups. - John T. -- John H