similar to: Why do un-groupmap'ed Unix groups show up in Windows?

We have bumped into a most odd problem. Server: Debian Etch and their Samba 3.0.24-2 Client: WinXP SP2, MSI v3, all hot fixes The following settings are in place on the server: #!/bin/bash # # initGrps.sh # Map Windows Domain Groups to UNIX groups net groupmap add ntgroup="Domain Admins" unixgroup=domadmin rid=512 type=d net groupmap add ntgroup="Domain Users"

I have a share which a group write list. That group is mapped to a Linux group in /etc/group. That group in Linux has two users. The first user listed is suddenly unable to write, but the second one is. With the affected user logged in to Win2K, ifmember /list shows they are a member of the group, as does the working account. I am guessing one of those .tdb files or something got scrambled on the

First off, on the Windows side I use "ifmember.exe /list" to check the group membership in affect for the currently logged in domain user, works like a charm. However, Linux side is another story, specifically the net command. We have, among others, the following mapping in place: net groupmap modify ntgroup="Domain Admins" unixgroup=domadmin Based on this documentation:

Hello While searching the archives and googling for : -login script to map drives according to group membership I saw lots of complicated solutions (on-the-fly scripts, group directories) etc. but the following works very well for me: I downloade dthe ifmember.exe from the microsoft website, and stuck it in the netlogon directory (not the scripts directory)

Considering the following page... http://us3.samba.org/samba/docs/man/guide/small.html First of, my compliments to John for some great examples to study. In my mind I see three levels of security: 1) Linux - such as SSH'ing into the Linux server, Linux accounts and groups come into play here 2) Samba PDC - "Domain Admins" "Domain Users" come into play here. Examples

I planned using ifmember.exe from Windows 2000 resource kit to map the right drive-mappings to the right shares with logon-scripts. Unfortunately it seems as ifmember simply doesnt report the right groups for the users. Even tho "id user1" shows the right groups; "uid=2082(user1) gid=1002(Group1)roups=1002(Group1),545(Users),1000(Group0)", User is a member of group

Long day yesterday for us here, first production implementation of Samba has to be rolled out and the client's old network reinstalled... cause: this "access deneied" issue which seems to be randomly affecting Samba implementations and from what I can see folks say Samba 3.0.2 was the last good build. If that describes you, please test this as I have come up with a way to turn the

Hi, When Samba is running as a PDC and a workstation is joined to the Domain, should the user logged into the workstation be able to see all the groups they are a member of using `ifmember /list`? Is the below output as expected? I'm I correct thinking that as all my groups originate in the Unix world, I don't need winbind to allow the Workstations to see them? For what

Dear all I have install samba + ldap and it is successfully joing the domain but problem is when i login in XP machine with Administrator account of samba i cannot change anything in XP even not system time so is it problem of privileges ?? $ cat ~/satish/url.txt http://www.linuxbug.org

Hello everybody, we were running into trouble after upgrading our samba PDC to a new hardware (and a new debian release). Before the upgrade we used 3.0.22 on a debian sarge machine without problems. Moving the installation to a new machine with debian etch (amd64, samba 3.0.24-6etch4) worked good at the first look. A closer look shows the following problems: - a domain member server (samba

Dear all, I ran PDC on smbpasswd auth. When i use following the command, i receive : ////////////////////////////////////////// debian:/usr/local/etc/samba_3# ./bin/net rpc join mylove -U root Enter root's password: Creation of workstation account failed Unable to join domain MYLOVE. debian:/usr/local/etc/samba_3# /////////////////////////////////////////////////////// my smb.conf is :

I am using Samba PDC with OpenLDAP2 and smbldap-tools. As part of my logon.bat, I call a script called ifmember.exe. This script can list out the groups a user is a member of. It is reporting that my root user is a member of the group 'engr.' I don't know if this is a bug with ifmember.exe or if it's an issue in Samba or in LDAP. Here is some relevant data:

Hello world, I have a very strange update problem: this night I upgraded from 3.0.5 to 3.0.6 (debian unstable) and the system broke completely with very strange errors (I did not change anything to smb.conf) - win98 users can log in, copy and everything - xp users can log in, they see the shares but they cannot access the files (read error in xp). I have tested it with Xp-Prof SP1 und SP2

Greetings- I am working through coming up with a Linux client integration to Samba PDC's. I mount several shares with this sort of syntax: /bin/mount -t cifs -o credentials=/home/userid/.smbcredentials,uid=userid,gid=userid,dmask=0777,fmask=0666 //ldslnx01/data /mnt/ldslnx01/data/ However when I create new files/dirs on the Samba share from the Linux workstation, the perms are not 0666/0777

Greetings- I am wondering if anyone from the Samba team would happen to have interest in creating official builds for Ubuntu? To add a twist, unfortunately I would not be fishing for 7.10 packages, but rather 7.04 as we ran into too many issues with 7.10 whereas 7.04 seems rock solid stable. Or, are there packages built of Samba releases for Ubuntu external to samba.org? Thanks, -- Michael

Greetings again, Michael Lueck wrote: > > Question about a hard spot we encountered... one Windows machine joined to the domain is insisting on setting its LOGONSERVER to its own hostname rather than the PDC it logs into. See example: Seems the root of the difficulty is that the Windows clients are only partially joined to the new server PDC. Plugging them into the former PDC server

Samba 3.0.5 Debian Package Kernel 2.6.7 custom compile on Debian Testing Configure Samba per my KLUG presentation on Samba PDC to Win2K Clients: ftp://ftp.lueckdatasystems.com/pub/presentations/klugsamba3pdc-bookreview.pdf In the error condition, a user account is assigned to the domadmin and ntadmin Linux groups. In smb.conf -> admin users = @domadmin On the workstation there are mappings

I am testing out Debian Etch, and ran into an issue granting SeMachineAccountPrivilege to an account... which granting that permission had been troublesome in the past. The command I am issuing is: net rpc rights grant LDS-DEMO\\ldsinst SeMachineAccountPrivilege And I try running the command with an account that is a member of the "Domain Admins" group. The command returns: Failed to

Recent list messages got me thinking... Is there a way to support both local and roaming profile with one server / domain? As I understand it, the "magic" line that tells Samba not to do roaming profiles is the smb.conf line: logon path = Which the line must exist, and must be set to null. But that is in the global section. So is there a way to support both local and roaming...

One of the servers we admin has countless such errors in log.smbd: [2007/05/07 14:17:08, 0] tdb/tdbutil.c:tdb_log(783) tdb(/var/cache/samba/printing/HPLJ3600.tdb): rec_read bad magic 0x443810ec at offset=28412 The only thread I saw regarding "rec_read" stated: <><><><><> If this really happens often to you, then you have some basic problems with your