similar to: Samba PDC with ldapsam - unable to join the domain

Hello, Despite not having received any input on my last problem, I managed to work it out and now I've finally got a working Linux PDC with ldapsam and non-root domain admin. As it turned out, the problems were caused by a combination of Samba settings, too tight security on Windows boxes and, in case of XP x64, a need for some patches against Samba source code; here I would like to ask a

How does one create all of the builtin groups for this release? When using tdbsam with previous releases one would automatically get such groups as: System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> -1 Domain Admins (S-1-5-21-1832519723-2688400599-3493754984-512) -> domadmin Domain Guests (S-1-5-21-1832519723-2688400599-3493754984-514)

Hi I got a problem with groupmapping. It doesn't work correct: Wilma2:/home/root # net groupmap list | grep 512 Domain Admins (S-1-5-21-3371203057-3264423045-2392767973-512) -> domadm ldapsearch -x cn=domadm: # domadm, groups, wms-hn.de dn: cn=domadm,ou=groups,dc=my-domain objectClass: posixGroup objectClass: sambaGroupMapping cn: domadm gidNumber: 65669 memberUid: tilo sambaSID:

Hi, Before Samba 3.0.0 RC4 I was running Samba 3.0.0 beta3, and when I upgraded to RC4, I began having problems with group mappings. I didn't notice at first, because on my laptop I don't normally log on to the domain. I just noticed when I tried to use my desktop and log on to the domain... I don't have Domain Admin privileges. So, I look at 'net groupmap list' ... and it

Hello all, I am having a some problems with groups. If I use this command "net rpc group list -Uroot%not24get" as the root users I get an error. "Could not connect to server 127.0.0.1 The username or password was not correct" If I try to add groups I also get the same error. and I don't know if this is relevent or not but when I try to join win groups and Unix groups

I'm working with Samba 3 on my Gentoo box. So far setting up andconfiguring Samba w/ldap and krb5 support is pretty straight forwared. My Gentoo box is now a member server of the domain, shows up in Active Directory. I can get a kerbereos ticket from our W2K PDC and connect to windows shares with as little effort as: smbclient //server/share -k Now I'm ready to start moving into

I have a new Debian testing machine running the Debian Samba 3.0.5. Everything seems OK except that I cannot get users to have domain admin rights. I have Windows XP workstations. The workstations join and log onto the domain fine. A "net groupmap list" yields: server:/home/tnolen# net groupmap list System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1 Guests

Hello all, I am having a some problems with groups. If I use this command "net rpc group list -Uroot%not24get" as the root users I get an error. "Could not connect to server 127.0.0.1 The username or password was not correct" If I try to add groups I also get the same error. and I don't know if this is relevent or not but when I try to join win groups and Unix groups

Hello all, Let me say first I'm very new to Linux (only had it running 3 days), so bear with me if I'm a bit ignorant. I'm unsure if I should even post this here, or if this list is exclusively for hardware issues... I'm running into difficulties (on a win2k client) adding the Samba "Domain Admins" group to the Windows "Administrators" group. I am able to log

Hello List, I have tried to grant SeMachineAccountPrivilege to an extra group. Users in this group should not have Admin rights but they should be able to join workstations to the domain. My first try was to grant the right to a single user wich is working as expected. net rpc rights grant "TOPTEST\toptest.r" SeMachineAccountPrivilege -U domainadmin net rpc rights shows:

Is there more documentation for smbgroupedit than the manpage ? I'm trying to get the domain admins group to work. Steps i taken so far 1. create a unix group domadm 2. add my admin users to the domadm group 3. map the Domain Admins Group to the domadm group 4. make the domain admins group a domain group (smbgroupedit reported it as unknown) 5. remove all domain users and groups from the

Hello, Can anybody please help me with the following errors. Whenever a user from the group "accounting" logs in the the PDC, a login box pops up and the following message appears "Accessed Denied - Accou~!n.bat". The problems seems to ly with people who belong to the accounting group and are running Win98se on the desktop. Absolutely nothing has been changed on the system.

hi@all! i set up a system where samba is a primary and a secondary domain controller; the authentication is over ldap and everything works fine but.... i would like to test what happen when the pdc is down and so i shutdown the smb service on the pdc. the logins from all clients worked well on the bdc but when i try to join a new machine to the domain, it can't contact the domain

Hello I have been solving a problem how to make a nonroot user able to administer the domain (add users, groups, modify them etc.) from Windows workstation using usrmgr.exe It looks like what is stated in Samba HOWTO collection as prerequisites is not enough. First I found Chapter 12 cxl "How to make Samba PDC users member of the Domain Admins group" - made the nonroot user member of

I am logged into a new test Linux server with my personal admin account. It is a member of a Linux group which has been mapped to Domain Admins. When I issue 'net rpc rights grant auserid SeMachineAccountPrivilege' and enter the password for my personal admin account, I am returned that it failed with NT_STATUS_NO_SUCH_PRIVILEGE. 'auserid' is both a Linux account and has been

Hi, I have Samba 3 as Domain controller. From a Windows 2000 Professional I share a folder (c:\test) with access permission for certain domain user (MYDOMAIN\yo). I can access to that folder from other w2000 with that user validated into it. If I add that user to a unix group (domadm) and map this group to Domain Admins (net groupmap modify ntgroup="Domain Admins"

Hey all, I'm coloring outside the lines a little bit here but I would like to automate the install of a samba pdc. Within that script to install I would like to assign rights to a group. Here is an example of a few steps: # Create Unix group: groupadd domadmins # Map unix group to samba groups: net groupmap add ntgroup="Domain Admins" unixgroup=domadmins rid=512 type=d # Assign

Hello! I try to assing privileges in 3.11 and get error. If I try to do this from root: net -S dm -U root rpc rights grant 'TEST\mail' SeMachineAccountPrivilege Password: Failed to grant privileges for TEST\dm (NT_STATUS_ACCESS_DENIED) Or, if I do this from user, which is in Domain Admins group: /net -S dm -U dm rpc rights grant 'TEST\mail' SeMachineAccountPrivilege

Hello, i updated my samba to version 3.0.20 on a suse 9.2 system. I thought, some new net rpc commands need samba 3.0.13. But I get faults with the command: amd:~ # net rpc rights grant testuser10 SeMachineAccountPrivilege [2005/08/25 02:45:35, 0] param/loadparm.c:map_parameter(2536) Unknown parameter encountered: "enables privileges" [2005/08/25 02:45:35, 0]

Hi, I have a windows 7 machine withouth local administrator account. I need to create such an account. I can log in to the machine with a user on my samba domain. What do I need to do in order to get administrator access, or access to create an local administrator account? I have tried to do this: [root at float samba]# net rpc group addmem "Administrators" 'DOMAIN\username'