similar to: How to prevent users from deleting users from domain via usrmgr.exe ???

hi folks, i hope you can help me!!! i'm using samba v3.0.14a (sernet) on debian sarge. openldap v2 is my backend, smbldap-tools 0.8.4 (patched for our organization). when adding a user via usrmgr.exe to an existing domain group i get the following error: [in usrgmr] The following error occured changing the properies of the user xxx User does not belong to this group [in smbd.logs]

hello I've been reading the thread (http://marc.theaimsgroup.com/?t=113286376900001&r=1&w=2) and I have the same limitation with WINS in a PDC/BDC. That's why I have the following (experimental) setup: PDC ==> wins support = yes, passdb backend: master ldap BDC ==> wins support = yes, passdb backend: slave ldap I configured some of my XP clients to use both WINS servers

Hello list, i did a quite sucessfull net rpc vampire but one promblem remains. Everything is fine, but the user group memberships aren't restored. Only alle primary group member ships are restored. every user is in the primgrp (4126 Users). All Groups (2659) are restored including sids. but no membership is restored! I don't know why. here's my command: net rpc vampire -l -S nt4pdc

hi list, i'm using samba v3.0.14a when working with "admin users =" "inherit owner" does not work for me anymore the owner is set to "root" any ideas? will "inherit owner" solve this problem? thx in advance -- Michael Gasch Max Planck Institute for Evolutionary Anthropology Department of Human Evolution Deutscher Platz 6 D-04103 Leipzig Germany

Hi folks, it's not really an issue for me but could you please comment this behaviour i described? may be i can then open a bug report. thx! -- Michael Gasch Max Planck Institute for Evolutionary Anthropology Department of Human Evolution (IT) Deutscher Platz 6 D-04103 Leipzig Germany Phone: 49 (0)341 - 3550 137

hi, it?s me again :( i?m still not able to use idmap_rid in a trusted domain environment (samba v3.0.20b Sernet). well, to be clear: NSS is not working (id, getent passwd <user>, ...) so samba does not find the posix information for any user from a foreign domain it?s working in a single domain with ##################################### # WINBIND - Settings idmap backend =

hi list, just for my knowledge -> we have a working PDC / BDC infrastructure for our domain DOMA, where PDC trusts another PDC from DOMB (all samba v3). when PDC from DOMA goes down, is the trust still valid or do we have to setup the trust on *both* DCs from DOMA (net rpc trustdom establish DOMB ... )? is that possible at all? thx&greez -- Michael Gasch Max Planck Institute for

Hi, i've just migrated from nt4 to samba 3.0.10-1.4E.9 with tdbsam, running on Centos 4.4 The net rpc vampire went fairly smoothly. Now that samba is running as the PDC (nt4 machine has been laid to rest) i am having trouble renaming computers in the domain. If i try this from the windows workstation (XP Professional) i get access denied. I use "root" or administrator which is

hi list, is it possible with samba v3 and ldap backend to embedd a normal group like "normalgroup" in the group "Domain Administrators" to give members of the group "normalgroup" full administrative rights on workstations? i tried with "net groupmap addmem sid-of-normalgroup sid-of-domain-admins" and "net groupmap addmem sid-of-domain-admins

hi, i have a question about winbind, idmap_rid and trusted domains. at sambaxp jerry said it's possible to have idmap_rid working with trusted domains. this is what we would like to have here. smbd -b doesn't show this compile option on 3.0.14a rpm (SuSE). may be this is normal, but how do i ensure that this option is in my binary w/ testing too much :) or how can i compile it

I'm having some odd problems with USRMGR and Samba group accounts. USRMGR seems to work fine for user accounts, and it also correctly displays the list of group objects (these are all stored in LDAP btw). This can be seen in http://www.ehsco.com/misc/samba/umgr-main.gif Two of the groups can be managed while the other two cannot. For example, http://www.ehsco.com/misc/samba/umgr-admins.gif

Domain Admins are not allowed to modify the ldapsam database via usrmgr. lib/smbldap.c: smbldap_open: cannot access LDAP when not root.. Is this by design? G?nter Gersdorf -- Guenter Gersdorf Phone: +49/(0)531/391-7634 Inst. f. Werkzeugmaschinen Fax: -5842 und Fertigungstechnik, TU Braunschweig E-Mail: G.Gersdorf@tu-bs.de

hi list, we recently saw the following weird behaviour on samba v3.0.13 with MacOSX panther and tiger as clients --setup-- [share1] path = /data valid users = @admins force user = administrator inherit permissions = yes force create mode = 770 force directory mode = 2770 [share2] path = /data/folder valid users = @noadmins force user = administrator inherit permissions = yes force create mode

Hello fellows, Does anyone of you has found the hack to permit win xp home edition to join a domain controller. I found somewhere on the net a software that does this. But it cost 145 $ US, so like the upgrade... ( the only difference in that i will not give the money to Bill Gates) My problem is with the password modification. Every times someone does change his password, he has to go onto the

Using Suse ES9 SP2 with OpenLDAP backend with Samba 3.0.21pre I'm getting the following error. "The stub received bad data Would you like to administer another domain?" then User Manager closes when I select no. User Manager seems to work in limited fashion if Low speed connection is selected. This has worked fine until a few days ago and I have not made any changes. Thanks

hi, i was able to successfully run vfs_shadow on a samba share with win xp shadow copy client. but i think it?s currently not implemented that one could export [homes] with this vfs object, because AFAIK each @GMT-snap has to resist directly under the samba share. but [homes] is a virtual share representing different shares (depending on users). has anybody hints about using vfs_shadow with

hi i've been sucessfully using samba 3.0.0 and win2k/xp clients in a domain if i try to add a win2k/xp workstation in a samba 3.0.1 controlled domain (with the same smb.conf as the 3.0.0 PDC), i always get "no mapping between account names and security ids was done" the same workstation can enter a 3.0.0 controlled domain with no problems ! machine accounts were also created so

Since we're on the subject of Samba over the WAN.... (BTW, I'm running three offices with a Samba 3.0.9 PDC and two Samba 3.0.9 BDCs over an FreeSwan based WAN and it works just fine. The WINS server is a must in my book though.) Last Thursday and Friday, one of the remove office's WAN lines went down. While the outages were significant, nothing major happened because of it. But,

hi, i'm using machine 1 (SuSE 9.0 32Bit): rsync 2.6.2 (from SuSE RPM) machine 2 (SuSE 9.1 64Bit): rsync 2.6.2 (from SuSE RPM) my command looks like the following: /usr/bin/rsync -W --progress --rsync-path=/usr/local/bin/rsync -e ssh --delete --force -av /data/ machine2:/data/machine1/ after rsyncing both machines, some files differ ! i verified these differences with "diff",

We have a Linux user and group with the same name (username prox, group name prox) and a Samba share with "force user = prox" set. Since upgrading from Samba 3.0.21b to Samba 3.0.23a, that share no longer works. smbclient gives the following error when connecting to the share: tree connect failed: NT_STATUS_NO_SUCH_USER The Samba server logs the following error: [2006/08/07 09:38:26,