similar to: Slow logins and groupmaps, Please Help

I'm trying to add a user to the domain admins group in vain. I've tried using the windows usrgrp tool. I've tried doing 'pdbedit -u username -G S-1-5-21-2351621536-730267382-1598341932-512' I've tried 'net groupmember ADD 'Domain Admins' username. The user I'm trying to add is already in the unixgroup that's mapped to the NTgroup. Does any one know

Hi all, I've got Samba working as a PDC with ldapsam and am unable to add groups or groupmaps, although I can add/manipulate users and machines without any problems. With Samba 3.0.23b if I try to add a group with the command: net rpc group add testgroup it fails with: add group failed: NT_STATUS_NO_SUCH_GROUP The UNIX group is created in /etc/group but nothing is added to LDAP. I've

Hi, I'm trying to join ?linux machines to AD domain with the help of winbind. In order to make account managent more easier, I want to create corresponding group maps from every linux native group, then join domain users/groups to the new LOCAL groupmap. At present, BUILTIN groupmap works fine with the steps: net groupmap add sid=S-1-5-32-544 unixgroup=admin ntgroup=BUILTIN\\Administrators

Considering the following page... http://us3.samba.org/samba/docs/man/guide/small.html First of, my compliments to John for some great examples to study. In my mind I see three levels of security: 1) Linux - such as SSH'ing into the Linux server, Linux accounts and groups come into play here 2) Samba PDC - "Domain Admins" "Domain Users" come into play here. Examples

Hi, I think at first you have to do a net groupmap add all the well known Groups. System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> -1 Domain Users (S-1-5-21-3732367786-856876144-3282938955-513) -> -1 Domain Admins (S-1-5-21-3732367786-856876144-3282938955-512) -> -1 Power Users (S-1-5-32-547) -> -1 Domain Guests

Hi I have samba 3.0.14a (debian/stable) and wonder where the problem is that running this command: # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=512 type=d gives: adding entry for group Domain Admins failed! but (note changed rid) # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=1000 type=d works fine. Hm, winbind is not working, but I

Hello, Background: I recently upgraded a samba 2.8 system to samba 3.0 dl'ed from samba.org current. Everything works great except the group mapping and some net sessions that get stuck but I want to focus on the groupmap issue today. Things I have done: Delete group_mapping.tdb -- restarted samba -- net groupmap modify ntgroup='Domain Admins' unixgroup=ntadmins -- result: shows

hi, i'm moving from nt4 to samba ( 3.0.7 on suse 9.2). I'm able to join the domain, and roaming profiles work. I used net groupmap to map unix to nt group, this way: System Operators (S-1-5-32-549) -> -1 Domain Guests (S-1-5-21-2839205766-3667556824-2828225164-514) -> nobody Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> ntguests Power Users (S-1-5-32-547)

Firstly I apologise for the length of this query but I am hoping that if I document everything I did someone might respond / be able to help. My Configuration is Samba 3.0.2a as a PDC on Redhat 8. I cannot for the life of me get the "Domain Admins" functionality to work I am hoping that another set of eyes can shed some light on this problem as I have now spent 41 hrs googling /

Hi, -----Original Message----- From: John H Terpstra [mailto:jht@samba.org] > "domain admin group" removed > > Because you now have something much more powerful that provides real NT > Groups to your NT/200x/XP clients. But if I use LDAP for both Samba and system auth. The groups, what I added with base.ldif (idealx) exist in samba and system. for example "getent

Hi, would be happy if somebody might help me with the following problem: I installed Samba as the Primary DC -- works perfectly, XP clients can join the domain, access the shares ... The domain users's primary group is the "users" Unix group. root is member of the "ntadmins" Unix group. Mapped the Unix groups to NT groups as follows: net groupmap modify

I'm trying to iron out all the problems on my PDC. It's setup with a LDAP backend that's replicated to an ldap slave/BDC. Here's the problem: # smbldap-groupshow 'domain admins' dn: cn=Domain Admins,ou=People,dc=strozllc,dc=com objectClass: posixGroup,sambaGroupMapping gidNumber: 512 cn: Domain Admins memberUid: Administrator,root,astanley description: Netbios Domain

I believe I have everything setup correctly on my RH9 server running Samba 3.0.3.rc1 and openLDAP 2.1.22. I can join computers to the domain and authenticate to the domain without any problems. What I am having problems with is trying to do a group map so Domain Admins have administrative rights on the workstation when they login. I can get this to work on non LDAP setups by issuing net

We have bumped into a most odd problem. Server: Debian Etch and their Samba 3.0.24-2 Client: WinXP SP2, MSI v3, all hot fixes The following settings are in place on the server: #!/bin/bash # # initGrps.sh # Map Windows Domain Groups to UNIX groups net groupmap add ntgroup="Domain Admins" unixgroup=domadmin rid=512 type=d net groupmap add ntgroup="Domain Users"

Typical Linux Distros add all sorts of Unix groups to users when it creates them, like cdrom, floppy, dialout, audio, etc... Logging in to the domain from Windows with an account that has such membership over on Linux... "ifmember.exe /list" shows all of those memberships. Why exactly? I would expect only the groups I did a "net groupmap" on would be considered by Samba.

Hi! I'm experiencing some serious problems setting up Samba as PDC. File sharing works fine and I can even add my computer to the domain, but when I reboot I can't log in with my samba username and password. I've previously set up similiar server, though it wasn't trough VPN. I'm running latest Debian Etch with every package upgraded. I've also tried some older samba

Hi, I upgraded our print server from 2.2.8 to 3.0.1 and have had trouble subsequently. I can't add drivers with cupsaddsmb and have been trying to investigate the root cause. As far as I can tell, the appropriate administrative users aren't working correctly. From a Windows workstation, logged in as the domain admin, I expect to be able to change printer settings (e.g. Location or

Hello, i have some problems migrating a Windows 2000 PDC to a Debian GNU/Linux Samba Server, i want to migrate it to a LDAP backend.. but as i'm kind of newbie with ldap and samba migration stuff, i preffered to migrate it to tdbsam first and try it for a while, if everything works fine, then switch to a ldap backend. The problem is that Essential Windows Groups are automatically created, so

I've been at this for hours now and am still not getting it to work. I've been through the lists trying to find an answer and so far as I can tell, everything is configured OK. Obviously it's not, but I'm stuck. I recently installed Squeeze on my home server, overwriting a Lenny installation. I've been able to add my NT (Windows XP/Pro) domain accounts back in and pdbedit

Hello, I'm running FreeBSD-6.1, and Samba 3.0.22 with a Windows XP (SP2) client. As per subject line, administrator doesn't have administrator rights on the workstation. --- 'net groupmap list' gives, Domain Admins (S-1-5-21-3323006203-4037909810-1162086780-3003) -> ntadmins --- 'pdbedit -Lv' includes, Unix username: administrator NT username: Account