similar to: admin users not granted administrative privileges

Hi, I got samba 2.0.30b running on a Sparc machine with Solaris 10. I installed Kerberos 1.4.2 Openldap stable version 20051018 To compile Samba 2.0.30b with ADS Looks like Kerberos works kinit Administrator@MYDOMAIN.COM <mailto:Administrator@MYDOMAIN.COM> ==> works klist ==> shows ticket I added the server to the domain net join -U Administrator Joined

Hello! I'm kind of stuck here. I'd like to set up a Samba PDC server using a MySQL database backend, so that me and my colleges can easily administer the users with a PHP based web interface. I've already installed and configured Samba 3.0.11 and MySQL 4.0 on FreeBSD. Everything seems to work great, except I can't login. I always get a message that says the domain controller

Hello I have been solving a problem how to make a nonroot user able to administer the domain (add users, groups, modify them etc.) from Windows workstation using usrmgr.exe It looks like what is stated in Samba HOWTO collection as prerequisites is not enough. First I found Chapter 12 cxl "How to make Samba PDC users member of the Domain Admins group" - made the nonroot user member of

Firstly I apologise for the length of this query but I am hoping that if I document everything I did someone might respond / be able to help. My Configuration is Samba 3.0.2a as a PDC on Redhat 8. I cannot for the life of me get the "Domain Admins" functionality to work I am hoping that another set of eyes can shed some light on this problem as I have now spent 41 hrs googling /

Hi, I'm trying to set up one of my users to be a domain admin. I have unix/ldap group called "domainadm" with "user1" a member of the group. When I run "net groupmap list" I get the following: Domain Admins (S-1-5-21-186220259-3826000728-3192352269-7033) -> domainadm But when I go to log in to the domain with "user1" on a winxp machine, the

hi all. recectly i made the migration from samba 2.2.8 to 3.0. everything is working fine, except that i dont know how to grant administrator privileges in win 2000 clients. with 2.2.8, i used DOMAIN ADMIN GROUP parameter ( domain admin group = @adm) but its been removed in samba 3.0, and i dont know what to do. any help will be apreciated thanks in advance sebastian ------------ Internet GRATIS

Hello list last week we upgraded a 2.2 samba installation to the latest 3.024 release (with CUPS as printing backend). till now we granted some users the right to cancel printer queues from others with 'printer admin = printadmins' in smb.conf. I read through the changes-list and realized that 'printer admin' is now deprecated. I read through the Samba-book, the Howto-sections

I've got a Fedora Core 2 box running Samba smbd version 3.0.7-2.FC2. I've set it up as a Domain master for a new domain. I setup a Win2K Server box and had it join the domain. I made an "administrator" user, I mapped the groups via: net groupmap modify ntgroup="Domain Admins" unixgroup=admins net groupmap modify ntgroup="Domain Users" unixgroup=users I

Hello, i have some problems migrating a Windows 2000 PDC to a Debian GNU/Linux Samba Server, i want to migrate it to a LDAP backend.. but as i'm kind of newbie with ldap and samba migration stuff, i preffered to migrate it to tdbsam first and try it for a while, if everything works fine, then switch to a ldap backend. The problem is that Essential Windows Groups are automatically created, so

Relevant part of "net3 groupmap list" is System Operators (S-1-5-21-1617713866-2789119093-1479812082-1007) -> sys In howto there is the following example net groupmap modify ntgroup="System Operators" unixgroup=sys net groupmap modify ntgroup="Power Users" unixgroup=sys You can add System Operators but trying to add Power Users fails. If you do it in reverse

Hello, Second post: first had logs attached but was too big. I have a test environment with 1 windows 2000 AD domain pdc ( mixed mode install ), 1 linux server ( to become pdc ) and a win xp box to test logon when the migration was completed. The problem is no matter what I try after the migration the win xp's logonserver = windows server not linux server. I have no idea what is going

Im working on a samba server, debian box, samba version 3.2.5-4lenny9 I?ve added some users to the group g_staff, but it seems? not to work. Also tried to map the groupmap to unixgroup with command: net groupmap [modify/add] ntgroup="Domain Admins" unixgroup=g_staff type=domain and again, cant add admins rights to group g_staff, tried a lot of others stuff, but all of them

Hi I am new to linux & Samba. I would like to setup Samba as a domain controller and using Fedora-ds for authentication. I have read some documents from www.samba.org but I am still in the mist. Here is my dumb questions about Samba as follows. 1. Is CENTOS4.6+SAMBA3.0.25 as PDC +FEDORA-DS possible? 2. Is this HOWTO from

Just setup a new domain controller running Samba-3.0.20b. Using smbpasswd file (no LDAP). How do I setup a group of users so they become domain administrators? I thought I just typed this: % net groupmap modify ntgroup="Domain Admins" unixgroup=ntadmin I am in group unix ntadmin, but I'm it doesn't seem to work. Michael -- Michael Keightley

Considering the following page... http://us3.samba.org/samba/docs/man/guide/small.html First of, my compliments to John for some great examples to study. In my mind I see three levels of security: 1) Linux - such as SSH'ing into the Linux server, Linux accounts and groups come into play here 2) Samba PDC - "Domain Admins" "Domain Users" come into play here. Examples

Hi Everyone, I have a small project going on. I'm about to migrate Redhat 7.3 to Debian Etch (smbd version 3.0.23d-2+b1). I've already managed to migrate Redhat 7.3 to Debian Sarge (smbd version 3.0.14a-) without any bigger problems. However, when I migrate to Etch I face a small problem. The last thing I want to do before I start samba is to grant my linux/samba admin, NT 'Domain

samba-tool group addmembers domaingroup 'SAMDOM\user1' ERROR(exception): Failed to add members "SAMDOM\user1" to group "domaingroup" - Unable to find "SAMDOM\user1". Operation cancelled. samba-tool group addmembers 'SAMDOM\domaingroup' 'SAMDOM\user1' ERROR(exception): Failed to add members "SAMDOM\user1" to group

Hello. After fresh install. Samba and ldap seems to run normally ( I can join win2k workstation to linux samba pdc ). Using yast I create a system group named domadmin But I am unable to map "Domain Admins" to domadmin I am unable to map "Domain Admins" to existing ntadmin group I am unable to mofify mapping "Domain Admins" to domadmin group Thank you for

Hi I have samba 3.0.14a (debian/stable) and wonder where the problem is that running this command: # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=512 type=d gives: adding entry for group Domain Admins failed! but (note changed rid) # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=1000 type=d works fine. Hm, winbind is not working, but I

Hi list, I'm trying to set up a samba server and have run into a problem: Whenever I try to access a share other than /home/<user> I get a message saying that this resource is nonexistant on the server... I have problems getting "net groupmap modify" work, the commands I'm using is: net groupmap modify ntgroup="Domain Admins" unixgroup=root net groupmap modify