similar to: Users privilege in a NT-DOMAIN with samba as PDC

hi i am experiencing some problem with the configuring of samba as a PDC in a Windows network, ive configured samba as PDC, created users, set there password with smbpasswd and mapped unixgroup to nt group as follows: System Operators (S-1-5-32-549) -> -1 Domain Users (S-1-5-21-3614578222-3141096634 -3044101766-513) -> users Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) ->

i've tried to set the maximum age of passwords with: root@servlan:~# pdbedit -P "maximum password age" -C 8035200 account policy value for maximum password age was 8035200 account policy value for maximum password age is now 8035200 but if try to see the accounts with: pdbedit -L -v i get this: Unix username: nicola NT username: Account Flags: [U ] User

Hi All, I've been reading *lots* of pages and guides everywhere about setting up samba as a PDC, mainly the 8 part guide by John Terpstra. One common thing I found in all the guides I read were unstated dependancies on the Samba version. Tried it using 3.0.9 and it didn't have any rights (I found something somewhere saying this eventually). Then tried it using Debians default of

Hello. After fresh install. Samba and ldap seems to run normally ( I can join win2k workstation to linux samba pdc ). Using yast I create a system group named domadmin But I am unable to map "Domain Admins" to domadmin I am unable to map "Domain Admins" to existing ntadmin group I am unable to mofify mapping "Domain Admins" to domadmin group Thank you for

Hello, Second post: first had logs attached but was too big. I have a test environment with 1 windows 2000 AD domain pdc ( mixed mode install ), 1 linux server ( to become pdc ) and a win xp box to test logon when the migration was completed. The problem is no matter what I try after the migration the win xp's logonserver = windows server not linux server. I have no idea what is going

Hello, i have some problems migrating a Windows 2000 PDC to a Debian GNU/Linux Samba Server, i want to migrate it to a LDAP backend.. but as i'm kind of newbie with ldap and samba migration stuff, i preffered to migrate it to tdbsam first and try it for a while, if everything works fine, then switch to a ldap backend. The problem is that Essential Windows Groups are automatically created, so

Hello everyone! I've been testing the 3.0 beta 3 (I've just upgraded from 2.2.7), and made a PDC configuration with Windows XP Pro clients. Everything works fine, however, I'm fine tuning the NT and Unix group mapping; in particular, I want to map the Unix group 'users' to the NT group 'Power Users'. I've tried: net groupmap modify ntgroup="Power Users"

I'm running into some domain problems setting up Windows NT 4.0, Samba 3.0 (from source), OpenLDAP 2.0.27 and RedHat 9. I can't get a workstation to join the domain: when I attempt to join the domain from the workstation add machine gui with username and password, I'm told "The machine account for this computer either does not exist or is inaccessible"- but the add machine

Hello all, Sorry for my long post but is a very urgent situation (is required to configure 3 PDC in less then 4 hours) and i have not enough time to read and experiment so i am posting here my problem. Please read entire message (is a little bit long). I have already one PDC using samba-3.0.10-1.4E.2 (on RHEL4) which is working fine with windows 9x and xp clients, excepting one thing. All

Hi all, I've done a serious amount of reading around this but I still can't figure out the implications of what I'm seeing. I have inherited a CentOS 4 Samba 3.0.23 PDC & file server for 40 hosts that has been through the wars. It is standalone and stable and uses the smbpasswd file authentication backend, however I need to upgrade for Windows 7 support. I intend to build a

Firstly I apologise for the length of this query but I am hoping that if I document everything I did someone might respond / be able to help. My Configuration is Samba 3.0.2a as a PDC on Redhat 8. I cannot for the life of me get the "Domain Admins" functionality to work I am hoping that another set of eyes can shed some light on this problem as I have now spent 41 hrs googling /

Hello, I have a test environment with 1 windows 2000 AD domain pdc ( mixed mode install ), 1 linux server ( to become pdc ) and a win xp box to test logon when the migration was completed. The problem is no matter what I try after the migration the win xp's logonserver = windows server not linux server. I have no idea what is going on here. I've listed the process for migration

Howdy People, I have a problem with roaming profiles in samba 3.0.5 on redhat9 ( installed from the rpm with rpm -Uv samba.3.0.5.rpm I am not using LDAP ( dont know how and as I am a Netware person on a very steep learning curve with Samba, didn't want to complicate the installation after seeing every second posting on this list as a ldap problem). The smb.conf file is listed below. The

Hi, I think at first you have to do a net groupmap add all the well known Groups. System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> -1 Domain Users (S-1-5-21-3732367786-856876144-3282938955-513) -> -1 Domain Admins (S-1-5-21-3732367786-856876144-3282938955-512) -> -1 Power Users (S-1-5-32-547) -> -1 Domain Guests

Hello, I'm using Samba3Beta1 and i try to map group. I create a posix group in my ldap: dn: cn=Administrateurs du domaine,ou=Groups,dc=middleearth,dc=ring objectClass: posixGroup cn: Administrateurs du domaine memberUid: root memberUid: administrateur gidNumber: 1000 And I try to map this group with the nt group : Domain Admins net groupmap add ntgroup="Domain Admins"

Relevant part of "net3 groupmap list" is System Operators (S-1-5-21-1617713866-2789119093-1479812082-1007) -> sys In howto there is the following example net groupmap modify ntgroup="System Operators" unixgroup=sys net groupmap modify ntgroup="Power Users" unixgroup=sys You can add System Operators but trying to add Power Users fails. If you do it in reverse

So here is the setup now: pam worknig, ldap working, samba working, passwd sync works great both ways (linux accounts > win accouns; win > lin). I'm useing another domain name for the new pdc. Today i tried to migtrate all the accounts from the Win2k PDC and i got into problems. I changed in smb.conf the domain name to the one of the win PDC , joind my samba intro the domain and did a

I have recently run across this problem and would like to warn people about it. I had an already established domain running under Samba 2.2.8. I then upgraded to 3.0. I removed the 'domain admin users = root' line from my smb.conf because certain tools complained about it being there. After the upgrade, I followed the Samba 3 HOWTO docs on samba.org. I created my domadm, domguests, and

Hello all, I'm using samba 3 as a pdc on CentOS 3.7 (package is samba-3.0.9-1.3E.7 based on 3.0.9 + rh patches) I would like to recevive some clarification about predefined "Domain Computers" group in Samba 3, as I didn't find complete information about this in various documents. It is stated as a well known but not essential entity inside samba documentation. Is it correct to

I have compiled Samba 3.0.22 on Solaris 10 (sparc.) It has been configured as a PDC with a domain of, say, "SAMBADOMAIN." It has some predefined group mappings for the Administrators and "Domain Admins" group. These mappings were dropped in later versions of Samba. (I have been working with 3.0.24 as well. Unfortunately it doesn't seem to play nice with