similar to: Checking effective group membership - Linux side

We have bumped into a most odd problem. Server: Debian Etch and their Samba 3.0.24-2 Client: WinXP SP2, MSI v3, all hot fixes The following settings are in place on the server: #!/bin/bash # # initGrps.sh # Map Windows Domain Groups to UNIX groups net groupmap add ntgroup="Domain Admins" unixgroup=domadmin rid=512 type=d net groupmap add ntgroup="Domain Users"

Typical Linux Distros add all sorts of Unix groups to users when it creates them, like cdrom, floppy, dialout, audio, etc... Logging in to the domain from Windows with an account that has such membership over on Linux... "ifmember.exe /list" shows all of those memberships. Why exactly? I would expect only the groups I did a "net groupmap" on would be considered by Samba.

I am testing out Debian Etch, and ran into an issue granting SeMachineAccountPrivilege to an account... which granting that permission had been troublesome in the past. The command I am issuing is: net rpc rights grant LDS-DEMO\\ldsinst SeMachineAccountPrivilege And I try running the command with an account that is a member of the "Domain Admins" group. The command returns: Failed to

Considering the following page... http://us3.samba.org/samba/docs/man/guide/small.html First of, my compliments to John for some great examples to study. In my mind I see three levels of security: 1) Linux - such as SSH'ing into the Linux server, Linux accounts and groups come into play here 2) Samba PDC - "Domain Admins" "Domain Users" come into play here. Examples

I have a share which a group write list. That group is mapped to a Linux group in /etc/group. That group in Linux has two users. The first user listed is suddenly unable to write, but the second one is. With the affected user logged in to Win2K, ifmember /list shows they are a member of the group, as does the working account. I am guessing one of those .tdb files or something got scrambled on the

Samba 3.0.5 Debian Package Kernel 2.6.7 custom compile on Debian Testing Configure Samba per my KLUG presentation on Samba PDC to Win2K Clients: ftp://ftp.lueckdatasystems.com/pub/presentations/klugsamba3pdc-bookreview.pdf In the error condition, a user account is assigned to the domadmin and ntadmin Linux groups. In smb.conf -> admin users = @domadmin On the workstation there are mappings

Jeff Sadowski wrote: > When ubuntu 14.04 went from samba 4.1.6 to 4.3.8 it killed my setup. I face the same sort of issue with Ubuntu 12.04. The Ubuntu security updates this week have killed the ability to log on to the Samba NT4 style domain from back level Windows clients. Our configuration does not have any LDAP, we run with the smbpasswd passdb backend. Just very simple. Anyway, here is

Hello. After fresh install. Samba and ldap seems to run normally ( I can join win2k workstation to linux samba pdc ). Using yast I create a system group named domadmin But I am unable to map "Domain Admins" to domadmin I am unable to map "Domain Admins" to existing ntadmin group I am unable to mofify mapping "Domain Admins" to domadmin group Thank you for

Hi, Same problem for me, any clue ? Gana?l. owen@isrl.uiuc.edu@lists.samba.org on 07/31/2003 01:42:21 AM Envoy? par : samba-bounces+ganael.laplanche=edf.fr@lists.samba.org Pour : samba@lists.samba.org cc : Objet : [Samba] groupmember list fails with 3.0.0b3 and LDAP Hi all, I've been working on a PDC with group mapping with Samba-3.0.0Beta3 with OpenLDAP-2.1.22. Things

Hi I've been running Samba 2.x for years but decided to move up to 3.0.2. I've set up a new samba server with a workgroup NEWBIOSS and netbios name PARETO. Im having problems setting up my domain admins. I used 'net groupmap modify "Domain Admins" unixgroup=domadmin' my 'net groupmap list' shows : System Operators (S-1-5-32-549) -> -1 Replicators

I groupapped the domadmins group in linux to ntgroup="Domain Admins" but instead of mapping to the SID number ending in 512 it's creating a new SID number endind in 2025 mapped to domadmins... Does anybody knows why??? It worked in the previous server. This is the command I execute net groupmap add ntgroup="Domain Admins" unixgroup=domadmin If I use the rid=512 option I

I planned using ifmember.exe from Windows 2000 resource kit to map the right drive-mappings to the right shares with logon-scripts. Unfortunately it seems as ifmember simply doesnt report the right groups for the users. Even tho "id user1" shows the right groups; "uid=2082(user1) gid=1002(Group1)roups=1002(Group1),545(Users),1000(Group0)", User is a member of group

i am also struggling with having a windows machine (xp) connect to a sampa-ldap pdc. as far as the guide detailing vegeta's work, i'm somewhere around step 5 where you groupmap the windows groups to the linux groups. but unfortunately when i run the command: net groupmap add ntgroup="Domain Admins" unixgroup=domadmin it fails. the error returned is : adding entry Domain Admins

Hello While searching the archives and googling for : -login script to map drives according to group membership I saw lots of complicated solutions (on-the-fly scripts, group directories) etc. but the following works very well for me: I downloade dthe ifmember.exe from the microsoft website, and stuck it in the netlogon directory (not the scripts directory)

OK. I am starting to believe that Samba 3.0.x is not stable. At least, the documentation for Samba as PDC with OpenLDAP backend (which is what I have been trying to do for four days) is crap. All the documentation for 3.0.x is mixed with 2.2.x. Most documents start as instructions for 3.0.x but put a lot of information that doesn't apply to 3.0.x, but 2.2.x. People in the mailing list

Greetings- I am working through coming up with a Linux client integration to Samba PDC's. I mount several shares with this sort of syntax: /bin/mount -t cifs -o credentials=/home/userid/.smbcredentials,uid=userid,gid=userid,dmask=0777,fmask=0666 //ldslnx01/data /mnt/ldslnx01/data/ However when I create new files/dirs on the Samba share from the Linux workstation, the perms are not 0666/0777

Greetings- I am wondering if anyone from the Samba team would happen to have interest in creating official builds for Ubuntu? To add a twist, unfortunately I would not be fishing for 7.10 packages, but rather 7.04 as we ran into too many issues with 7.10 whereas 7.04 seems rock solid stable. Or, are there packages built of Samba releases for Ubuntu external to samba.org? Thanks, -- Michael

Greetings again, Michael Lueck wrote: > > Question about a hard spot we encountered... one Windows machine joined to the domain is insisting on setting its LOGONSERVER to its own hostname rather than the PDC it logs into. See example: Seems the root of the difficulty is that the Windows clients are only partially joined to the new server PDC. Plugging them into the former PDC server

Recent list messages got me thinking... Is there a way to support both local and roaming profile with one server / domain? As I understand it, the "magic" line that tells Samba not to do roaming profiles is the smb.conf line: logon path = Which the line must exist, and must be set to null. But that is in the global section. So is there a way to support both local and roaming...

One of the servers we admin has countless such errors in log.smbd: [2007/05/07 14:17:08, 0] tdb/tdbutil.c:tdb_log(783) tdb(/var/cache/samba/printing/HPLJ3600.tdb): rec_read bad magic 0x443810ec at offset=28412 The only thread I saw regarding "rec_read" stated: <><><><><> If this really happens often to you, then you have some basic problems with your