similar to: group a machine account belongs to (samba pdc)

I moved an old smb system (version 2) over to a completely new system with version 3.0.7 running on FC2. I just copied the config files over and then ran swat and adjusted any problems that I found. Then save the swat config and started the smb server. Gosh be Good! It worked just fine. But... I stared noticing entries like these in the logs:

Hi developers i have noticed a spelling mistake when you execute a net groupmap add command. For example bash# net groupmap add unixgroup=uni-staff-planningfinance ntgroup=uni-staff-planningfinance type=domain comment='All Planning and Finance Staff' No rid or sid specified, choosing algorithmic mapping Successully added group uni-staff-planningfinance to the mapping db You

Hi, I am using Samba 3.0.10 PDC with LDAP as password DB. Before we use smbpasswd as passwd DB and every time I need to add a machine account into /etc/passwd so that the mahcine can join the domain. My understanding for LDAP is, this step is not needed any more since we will put all machine account into "ou=Computers". But I am proved to be wrong. Is this the way Samba works? I

I have setup samba 3 as a PDC for a set of computers that previously had Domain Users setup to run as local admins under XP, so that anyone that has logged into the domain has local admin access. Whats the best way to replicate this setup so that I don't have to go around to each computer and change the local security policy? Is there a way to assign users to the group domain users? or would

Hello, Second post: first had logs attached but was too big. I have a test environment with 1 windows 2000 AD domain pdc ( mixed mode install ), 1 linux server ( to become pdc ) and a win xp box to test logon when the migration was completed. The problem is no matter what I try after the migration the win xp's logonserver = windows server not linux server. I have no idea what is going

Dear List, while debugging the problem that users cant change file acls from windows clients, I found out that Samba (ver- sion 3.0.13 on debian sarge) tries to look up the SID (of the user who should be added to the acl) as a sambaGroupMapping in the LDAP. Does anybody can tell me: - why samba tries to match a SID of a user as a GroupMapping? This will never work as a user can never be a

Hello fellow list members, does anyone knows of a good HOWTO (or a book) for setting up Samba as a PDC? I have been dealing around with the Samba HOWTO collection, but to be honest, this is a hard job. There are some errors in it and descriptions are not this good. I even don't know what all the tools are for. I'm really experienced in Linux server stuff, but this one drives me mad.

Alright now that samba can talk to LDAP I have a blank slate. I know I need to setup group mappings, but I'm a little confused about this. Since it's an ldap backend do the groups need to have unix counterparts? Should I use the net groupmap command to add the mappings or should I use an LDIF file? David Sonenberg Systems / Network Administrator Stroz Friedberg, LLC 15 Maiden Lane, Suite

What should be the filesystem permissions for the profile share? Something like 0700 user:group for the directory? I'm getting permission denied errors from winxp pro sp2 and samba 3.0.8pre2. Does it have something to do with "profile acls"?

Do machine accounts have to have a group of their own ?

when trying to put a samba3 server into a domain (samba3 pdc) I always get the following error messages: [root@file samba]# net join -d 2 -U smbadmin RHEL -S server1.example.com [2004/09/30 23:36:35, 2] lib/interface.c:add_interface(79) added interface ip=192.168.0.150 bcast=192.168.0.255 nmask=255.255.255.0 smbadmin's password: [2004/09/30 23:36:37, 1] libads/ldap.c:ads_connect(251)

Hi, I have the following directory shared for the user "pcbadmin". He/she can mount and read/write without any difficulty: [pcbdata] comment = PCB Design Files path = /home/pcbadmin/pcbdata valid users = pcbadmin public = no writable = yes Question: How can I make the same directory only readable by the rest of the users ? TIA, Ben

Hi, I am using Samba 3.0.7. on a Red Hat 9 system. I tried to configure the machine as a PDC by using a configuration file quite similar to what is giving in the chapter 4.Windows NT domains of 'Using Samba' 2nd edition by Orielly. Using testparm shows that the machine has been identified as a PDC of the domain 'hamsateam.' To test the PDC, I tried to make a WinXP

Hello all, I am having a some problems with groups. If I use this command "net rpc group list -Uroot%not24get" as the root users I get an error. "Could not connect to server 127.0.0.1 The username or password was not correct" If I try to add groups I also get the same error. and I don't know if this is relevent or not but when I try to join win groups and Unix groups

All, First off I would like to say the book "The Official Samba-3 HowTO and Reference Guide" is awesome I purchased it off Amazon a couple of weeks ago. Ok now on to my problem. I have samba installed and configured and joined the domain no problem. When I run wbinfo -u I can see my domain users, when I run wbinfo -g I can see all my domain groups, BUT if I run

Hey all, Is there a comprehensive how-to on the new group nesting features? I've found a little bit of info, but nothing that paints a clear picture of the process. If anyone has any insight or can point me to a tutorial it would be much appreciated. I created the local groups and mapped them. Wbinfo and getent all seem to be working. I've been trying to do the 'net rpc group addmem

Since I upgraded from RedHat 9.0b / Samba 2.2.8 to Samba 3.0.10 I have problems with the roaming profiles of my students. Although the log-files show no errors at all, several users reports me that they are loosing files. One time I saw the problem myself, when a user logged in and had not a single file in her 'Personal Files' after logging out and logging in on the same host the whole

Please give me a sanity check here... The docs all call out requiring root access to allow machines to join a Domain. I do not want to give out the root password. For adding machines to the domain, I just want my users to be able to type "let me in". I could not find a solution on google, so I ran truss on the daemon during an add machine operation in combination with snoop, and

Hi: My english is very bad but I will try to explain that it We need. We work at Library of Ministry of Economy. We use one Linux Server with Samba 3.07 (mainly it has data files, CDS/ISIS databases and It application (from Unesco)). Right now, the administrator are Information System's people from Ministry.We need in some case not only to track what user are connected and what files they are

Mates, I'm trying to learn a little more. I have 3.0.7 running on Mandrake 7.2. I could see all the shares, but couldn't access the files "sendfile failed". I set use sendfile = No and all is well. I have a separate system Suse 9.0 pro with use sendfile = yes and I have no problems. What is the difference??? -- David C. Rankin, J.D., P.E. RANKIN * BERTIN, PLLC 510 Ochiltree