similar to: domain admins group in samba 3.0.7 question

Firstly I apologise for the length of this query but I am hoping that if I document everything I did someone might respond / be able to help. My Configuration is Samba 3.0.2a as a PDC on Redhat 8. I cannot for the life of me get the "Domain Admins" functionality to work I am hoping that another set of eyes can shed some light on this problem as I have now spent 41 hrs googling /

Hi I have samba 3.0.14a (debian/stable) and wonder where the problem is that running this command: # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=512 type=d gives: adding entry for group Domain Admins failed! but (note changed rid) # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=1000 type=d works fine. Hm, winbind is not working, but I

Considering the following page... http://us3.samba.org/samba/docs/man/guide/small.html First of, my compliments to John for some great examples to study. In my mind I see three levels of security: 1) Linux - such as SSH'ing into the Linux server, Linux accounts and groups come into play here 2) Samba PDC - "Domain Admins" "Domain Users" come into play here. Examples

Hello, i have some problems migrating a Windows 2000 PDC to a Debian GNU/Linux Samba Server, i want to migrate it to a LDAP backend.. but as i'm kind of newbie with ldap and samba migration stuff, i preffered to migrate it to tdbsam first and try it for a while, if everything works fine, then switch to a ldap backend. The problem is that Essential Windows Groups are automatically created, so

I'm running debian testing, so samba 3.05 atm. As of a few upgrades ago, which i think coincided with a library restructure or somewhat samba is no longer honouring read/write/admin lists on share definitions. Using the below share as an example, previously all users could access the share with read access, and those in the ntadmins group had write access. Since the upgrade users can only

When I run net add groupmap rid=512 ntgroup="Domain Admins" UNIXgroup="ntadmins" i get this error: adding entry for group Domain Admins failed! The error isn't very specific and the log doesn't show any error. I look in the log (log level -1 in slapd.conf) and I can tell it is able to search. I can post the syslog if you need it. I think their is an error in my

Hi all. I'm trying to migrate our NT4 domain to Samba-3.0.1-rc3. My smb.conf: [global] netbios name = vp workgroup = NUSAUS server string = Samba Server %v bind interfaces only = true # interfaces = 192.168.0.1/24 interfaces = 10.146.1.100/24 passdb backend = tdbsam log level = 5 log file = /var/log/samba3/log.%m max log size = 50 name resolve

Hello list, I'm using the samba 3.0.11... but when I access the log I have the following message. Somebody know what's happening? Apr 26 10:23:32 dsnd3576 smbd[4245]: [2005/04/26 10:23:32, 0] rpc_server/srv_util.c:get_domain_user_groups(376) Apr 26 10:23:32 dsnd3576 smbd[4245]: get_domain_user_groups: primary gid of user [ze] is not a Domain group ! Apr 26 10:23:32 dsnd3576

hi all. recectly i made the migration from samba 2.2.8 to 3.0. everything is working fine, except that i dont know how to grant administrator privileges in win 2000 clients. with 2.2.8, i used DOMAIN ADMIN GROUP parameter ( domain admin group = @adm) but its been removed in samba 3.0, and i dont know what to do. any help will be apreciated thanks in advance sebastian ------------ Internet GRATIS

Hello all, I am having a some problems with groups. If I use this command "net rpc group list -Uroot%not24get" as the root users I get an error. "Could not connect to server 127.0.0.1 The username or password was not correct" If I try to add groups I also get the same error. and I don't know if this is relevent or not but when I try to join win groups and Unix groups

Is there something special I need to do to let root add computers to the domain in 3.0? When I try to add the workstation I get an error about 'user not found' even though I can logon to a workstation joined to the domain as 'root'. I was able to add computers to the domain with 2.2.8 with an 'add user command' entry and 'domain admin group = root' in my

Relevant part of "net3 groupmap list" is System Operators (S-1-5-21-1617713866-2789119093-1479812082-1007) -> sys In howto there is the following example net groupmap modify ntgroup="System Operators" unixgroup=sys net groupmap modify ntgroup="Power Users" unixgroup=sys You can add System Operators but trying to add Power Users fails. If you do it in reverse

Typical Linux Distros add all sorts of Unix groups to users when it creates them, like cdrom, floppy, dialout, audio, etc... Logging in to the domain from Windows with an account that has such membership over on Linux... "ifmember.exe /list" shows all of those memberships. Why exactly? I would expect only the groups I did a "net groupmap" on would be considered by Samba.

Hello Is here anybody who is able to manage his NT4.0 domain on hid Samba 3 PDC with User Manager for Domains? Can you please tell me what things must be checked to be sure USRMGR.EXE administration (User Manager for Domains aka Domain User Manager) works? I am unable to make it working and tried already these Samba versions: 3.0.0 3.0.0rc1 3.0.0rc2 3.0.0rc3 3.0.1pre3 3.0.1rc1 2003-12-04 head

I just set up a fresh Samba PDC using OpenLDAP as the passdb. When I start smbd, I notice some log messages about failing to create some builtin groups: Administrators and Users. Is Samba trying to run a group add script which I have not setup or to create posixGroups in LDAP which it does not have permission to do? I turned up debugging output and saw that it complained about not getting gids

Hi, I'm trying to set up one of my users to be a domain admin. I have unix/ldap group called "domainadm" with "user1" a member of the group. When I run "net groupmap list" I get the following: Domain Admins (S-1-5-21-186220259-3826000728-3192352269-7033) -> domainadm But when I go to log in to the domain with "user1" on a winxp machine, the

Hello. After fresh install. Samba and ldap seems to run normally ( I can join win2k workstation to linux samba pdc ). Using yast I create a system group named domadmin But I am unable to map "Domain Admins" to domadmin I am unable to map "Domain Admins" to existing ntadmin group I am unable to mofify mapping "Domain Admins" to domadmin group Thank you for

hi, i'm moving from nt4 to samba ( 3.0.7 on suse 9.2). I'm able to join the domain, and roaming profiles work. I used net groupmap to map unix to nt group, this way: System Operators (S-1-5-32-549) -> -1 Domain Guests (S-1-5-21-2839205766-3667556824-2828225164-514) -> nobody Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> ntguests Power Users (S-1-5-32-547)

Hi, I have setup samba 3.0.7 with LDAP and NetApps Filers as our file store. We are going to lots of departmental shares, firstly we want only people from their own dept to have access to their department share, but users from other departments may need access to other dept shares, i would like to set up permissions on each dept share so a group is applied, then every user is added to the

Hello, Second post: first had logs attached but was too big. I have a test environment with 1 windows 2000 AD domain pdc ( mixed mode install ), 1 linux server ( to become pdc ) and a win xp box to test logon when the migration was completed. The problem is no matter what I try after the migration the win xp's logonserver = windows server not linux server. I have no idea what is going