similar to: mapping multiple groups with: net groupmap?

Relevant part of "net3 groupmap list" is System Operators (S-1-5-21-1617713866-2789119093-1479812082-1007) -> sys In howto there is the following example net groupmap modify ntgroup="System Operators" unixgroup=sys net groupmap modify ntgroup="Power Users" unixgroup=sys You can add System Operators but trying to add Power Users fails. If you do it in reverse

Hi I have samba 3.0.14a (debian/stable) and wonder where the problem is that running this command: # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=512 type=d gives: adding entry for group Domain Admins failed! but (note changed rid) # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=1000 type=d works fine. Hm, winbind is not working, but I

Considering the following page... http://us3.samba.org/samba/docs/man/guide/small.html First of, my compliments to John for some great examples to study. In my mind I see three levels of security: 1) Linux - such as SSH'ing into the Linux server, Linux accounts and groups come into play here 2) Samba PDC - "Domain Admins" "Domain Users" come into play here. Examples

Help please, a file server was upgraded from: Mandriva 2007.1, Samba 3.0.24-2.7mdv2007.1 to Mandriva 2008.1, Samba 3.0.28a-2.1mdv2008.1 and it broke something badly. After the upgrade logins from all XP workstations broke - some of the time. For an existing account (one with a profile already in the home directory) sometimes it will login normally. Well, almost normally, it never seems

Hi, Before Samba 3.0.0 RC4 I was running Samba 3.0.0 beta3, and when I upgraded to RC4, I began having problems with group mappings. I didn't notice at first, because on my laptop I don't normally log on to the domain. I just noticed when I tried to use my desktop and log on to the domain... I don't have Domain Admin privileges. So, I look at 'net groupmap list' ... and it

Hi, I think at first you have to do a net groupmap add all the well known Groups. System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> -1 Domain Users (S-1-5-21-3732367786-856876144-3282938955-513) -> -1 Domain Admins (S-1-5-21-3732367786-856876144-3282938955-512) -> -1 Power Users (S-1-5-32-547) -> -1 Domain Guests

Hello, I'm using Samba3Beta1 and i try to map group. I create a posix group in my ldap: dn: cn=Administrateurs du domaine,ou=Groups,dc=middleearth,dc=ring objectClass: posixGroup cn: Administrateurs du domaine memberUid: root memberUid: administrateur gidNumber: 1000 And I try to map this group with the nt group : Domain Admins net groupmap add ntgroup="Domain Admins"

I believe I have everything setup correctly on my RH9 server running Samba 3.0.3.rc1 and openLDAP 2.1.22. I can join computers to the domain and authenticate to the domain without any problems. What I am having problems with is trying to do a group map so Domain Admins have administrative rights on the workstation when they login. I can get this to work on non LDAP setups by issuing net

Hi all, I've scoured the net looking for a solution but to no avail. net groupmap list returns Domain Admins (S-############........) -> Domain Admins I would rather map Domain Admins to my root unix group. net groupmap modify ntgroup="Domain Admins" unixgroupreturns type=d returns an error; Could not update group database. If I delete via; net groupmap delete

Hello, i have some problems migrating a Windows 2000 PDC to a Debian GNU/Linux Samba Server, i want to migrate it to a LDAP backend.. but as i'm kind of newbie with ldap and samba migration stuff, i preffered to migrate it to tdbsam first and try it for a while, if everything works fine, then switch to a ldap backend. The problem is that Essential Windows Groups are automatically created, so

Stephanie, Thank you for your help. I tryed what you suggest but no luck.. I get this: root@lnxsrvr2:~# /usr/local/samba/bin/net groupmap add ntgroup="Domain Admins" unixgroup="Domain Admins" rid=512 Can't lookup UNIX group Domain Admins Is there something with initial compiling samba 3.0.0 that would disable this? All the documentation that I've seen makes it look so

Hi, i get this error when i run the net command to mapp unix group to nt groups. [root@samba smbldap-tools]# net3 groupmap add ntgroup=?Domain Admins? unixgroup=?Domain Admins? rid=512 Bad option: Admins? [root@samba smbldap-tools]# and also when i try to list the current groups in the domain, i get this error but i can see all entries if i use gq [root@samba smbldap-tools]# net3 groupmap

Hi, today I tried to setup domainadmins for local administration tasks like installing software etc. I followed the instructions to create a unix group and added unix users to the group. The same user had a working roaming windows profile. After that I did a "net group add ntgroup="Domain Admins" unixgroup=admin". After logging on to the windows xp SP2 workstation,

After reading through the documentation, I realized that as a part of the migration process from Samba-2.2.X to Samba-3.0.0 I needed to convert everyone in my smbadmin group (previously domain admin group = @smbadmin) to the "Domain Admins" group w/rid=512. So, I issued the following command: [root@localhost profile]# net groupmap modify ntgroup="Domain Admins"

Greetings, My setup is a multimaster win2k domain with full trusts established. My samba server has joined one of the master domains as a member server. smb.conf has encrypted passwords enabled and security=domain and running on Samba Version 3.0.1pre1 on Linux 2.4.20-20.9smp. Groupmap seems not to work as I was expecting it to. I am trying to map the local unix group

Setting up nut on a system where an LVM volume holds the root filesystem.. What is the appropriate device form to use with "mdadm --readonly" in halt? This is on a CentOS 5 system. So far I have found three possibilities, but I do not know which one (if any) will still be valid that late in the halt procedure: 1. /dev/md0 (from posts on the net) 2.

I recently ran into a situation where a Samba upgrade apparently broke the machine records in the smbpasswd file, with the resulting symptom that domain logons on those computers would fail about 95% of the time. (A very strange symptom, how it worked sometimes is still a mystery to me.) Similarly, this would fail: % smbclient -L saf01 -U 'saf/mathog%(password)' session setup failed:

Well this is even more interesting. Parts of the profile are not being saved back to the server, at least for existing users. For instance, 1. login 2. change the start menu to "classic view" 3. rearrange the desktop 4. logout 5. login again start menu is back as it was and it isn't classic view any more. Very strange. Wipe the test profile on the server and the copy on the

I have yet to get group mapping to work in samba 3.0. Getting very frustrated. I'm using openldap 2.1.23 as the backend database for samba 3.0.0. I've added the base domain groups as posixAccounts to the LDAP database using smbldap-populate.pl. root@lnxsrvr2:/usr/local/etc/openldap# ldapsearch -xv -b "o=30greatneck,dc=home,dc=net" # Administrator, Users, 30GreatNeck, home.net

Yesterday I migrated a Samba server from one machine running Samba 3.0.13 (on Mandrake 10.0) to another running 3.0.20-3 (on Mandriva 2006). The contents of: /etc/samba/* (all the .conf files) /usr/local/samba/private/* (secrets.pdb, smbpasswd) were moved intact from one machine to the other, as was all of the user data. I even checked md5sums - no changes to any of the samba files. Then