similar to: HELP !!! migrating from win2000 pdc to linux pdc

Hello, I have a test environment with 1 windows 2000 AD domain pdc ( mixed mode install ), 1 linux server ( to become pdc ) and a win xp box to test logon when the migration was completed. The problem is no matter what I try after the migration the win xp's logonserver = windows server not linux server. I have no idea what is going on here. I've listed the process for migration

Hi list, I'm having problems removing entries using net groupmap. When I use net groupmap ntgroup="Domain Guests" I see a message saying it has been successfully removed Domain Guests from the mapping db. The problem is I have multiple Domain Guests with the same sid. Can someone please tell me how to remove duplicates?. I've also tried net groupmap delete

Hi List, I'm currently migrating from win2000 to linux ( samba 3.0.10-1.4E ). Domain = TESTDOMAIN Windows Box Name = TESTPDC Linux Box = LINUXPDC I have joined the windows pdc from the linux box. Next I use: net getsid -S TESTPDC -W TESTDOMAIN which puts my SID in secrets.tdb. All is fine here. Next I use net getlocalsid which gives me an error so I use net getlocalsid TESTDOMAIN

Considering the following page... http://us3.samba.org/samba/docs/man/guide/small.html First of, my compliments to John for some great examples to study. In my mind I see three levels of security: 1) Linux - such as SSH'ing into the Linux server, Linux accounts and groups come into play here 2) Samba PDC - "Domain Admins" "Domain Users" come into play here. Examples

Hello, i have some problems migrating a Windows 2000 PDC to a Debian GNU/Linux Samba Server, i want to migrate it to a LDAP backend.. but as i'm kind of newbie with ldap and samba migration stuff, i preffered to migrate it to tdbsam first and try it for a while, if everything works fine, then switch to a ldap backend. The problem is that Essential Windows Groups are automatically created, so

I am testing out Debian Etch, and ran into an issue granting SeMachineAccountPrivilege to an account... which granting that permission had been troublesome in the past. The command I am issuing is: net rpc rights grant LDS-DEMO\\ldsinst SeMachineAccountPrivilege And I try running the command with an account that is a member of the "Domain Admins" group. The command returns: Failed to

Relevant part of "net3 groupmap list" is System Operators (S-1-5-21-1617713866-2789119093-1479812082-1007) -> sys In howto there is the following example net groupmap modify ntgroup="System Operators" unixgroup=sys net groupmap modify ntgroup="Power Users" unixgroup=sys You can add System Operators but trying to add Power Users fails. If you do it in reverse

Hi, I'm new to the list, I hope i'm posting at the right place ;) I'm having a hard time trying to update and to move my Samba 2.2 PDC to a new Debian server. Currently, the PDC is using Samba 2.2.8 on a Solaris Server. My goal is to move it to another computer, and to update it to a newer version (3.0.24) This must be fully transparent for the users, since I have no time to

Hi I am new to linux & Samba. I would like to setup Samba as a domain controller and using Fedora-ds for authentication. I have read some documents from www.samba.org but I am still in the mist. Here is my dumb questions about Samba as follows. 1. Is CENTOS4.6+SAMBA3.0.25 as PDC +FEDORA-DS possible? 2. Is this HOWTO from

Firstly I apologise for the length of this query but I am hoping that if I document everything I did someone might respond / be able to help. My Configuration is Samba 3.0.2a as a PDC on Redhat 8. I cannot for the life of me get the "Domain Admins" functionality to work I am hoping that another set of eyes can shed some light on this problem as I have now spent 41 hrs googling /

Hello I have been solving a problem how to make a nonroot user able to administer the domain (add users, groups, modify them etc.) from Windows workstation using usrmgr.exe It looks like what is stated in Samba HOWTO collection as prerequisites is not enough. First I found Chapter 12 cxl "How to make Samba PDC users member of the Domain Admins group" - made the nonroot user member of

Hi Everyone, I have a small project going on. I'm about to migrate Redhat 7.3 to Debian Etch (smbd version 3.0.23d-2+b1). I've already managed to migrate Redhat 7.3 to Debian Sarge (smbd version 3.0.14a-) without any bigger problems. However, when I migrate to Etch I face a small problem. The last thing I want to do before I start samba is to grant my linux/samba admin, NT 'Domain

Hi, i can't delete groupmap in my samba 3.0.12: # net groupmap list Domain Users (S-1-5-21-3984604316-2900431957-2958281145-513) -> products Domain Admins (S-1-5-21-3984604316-2900431957-2958281145-513) -> man Domain Admins (S-1-5-21-3984604316-2900431957-2958281145-512) -> domadmin Domain Users (S-1-5-21-3984604316-2900431957-2958281145-513) -> domuser # net groupmap delete

Hello. After fresh install. Samba and ldap seems to run normally ( I can join win2k workstation to linux samba pdc ). Using yast I create a system group named domadmin But I am unable to map "Domain Admins" to domadmin I am unable to map "Domain Admins" to existing ntadmin group I am unable to mofify mapping "Domain Admins" to domadmin group Thank you for

Hi All, Just a general question about groups. I am upgrading a Samba workgroup, server to a PDC. I have been reading: http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/groupmapping.html#id2589321 In this link, they tell of how to map a windows group to a Samba group net groupmap add ntgroup="Domain Admins" unixgroup=domadm rid=512 type=d Question 1: if my previous

Hi list, I'm trying to set up a samba server and have run into a problem: Whenever I try to access a share other than /home/<user> I get a message saying that this resource is nonexistant on the server... I have problems getting "net groupmap modify" work, the commands I'm using is: net groupmap modify ntgroup="Domain Admins" unixgroup=root net groupmap modify

Hi I have samba 3.0.14a (debian/stable) and wonder where the problem is that running this command: # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=512 type=d gives: adding entry for group Domain Admins failed! but (note changed rid) # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=1000 type=d works fine. Hm, winbind is not working, but I

I groupapped the domadmins group in linux to ntgroup="Domain Admins" but instead of mapping to the SID number ending in 512 it's creating a new SID number endind in 2025 mapped to domadmins... Does anybody knows why??? It worked in the previous server. This is the command I execute net groupmap add ntgroup="Domain Admins" unixgroup=domadmin If I use the rid=512 option I

Hi All, I am using Samba 3.2.11 on sles 10. I have create a Unix group 'grp1' and mapped it to a ntgroup "Group One". Unix group 'grp1' has one user i.e 'usr1'. 'net groupmap' command show the mapping with correct SID and gid value. Please, have a look here. # cat /etc/group | grep grp1 grp1:!:12613:usr1,raj1,raj2 # # net groupmap list Group One

Hi, Before Samba 3.0.0 RC4 I was running Samba 3.0.0 beta3, and when I upgraded to RC4, I began having problems with group mappings. I didn't notice at first, because on my laptop I don't normally log on to the domain. I just noticed when I tried to use my desktop and log on to the domain... I don't have Domain Admin privileges. So, I look at 'net groupmap list' ... and it