similar to: Fwd: Net groupmap list puzzler

Considering the following page... http://us3.samba.org/samba/docs/man/guide/small.html First of, my compliments to John for some great examples to study. In my mind I see three levels of security: 1) Linux - such as SSH'ing into the Linux server, Linux accounts and groups come into play here 2) Samba PDC - "Domain Admins" "Domain Users" come into play here. Examples

Hi I have samba 3.0.14a (debian/stable) and wonder where the problem is that running this command: # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=512 type=d gives: adding entry for group Domain Admins failed! but (note changed rid) # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=1000 type=d works fine. Hm, winbind is not working, but I

We have bumped into a most odd problem. Server: Debian Etch and their Samba 3.0.24-2 Client: WinXP SP2, MSI v3, all hot fixes The following settings are in place on the server: #!/bin/bash # # initGrps.sh # Map Windows Domain Groups to UNIX groups net groupmap add ntgroup="Domain Admins" unixgroup=domadmin rid=512 type=d net groupmap add ntgroup="Domain Users"

I believe I have everything setup correctly on my RH9 server running Samba 3.0.3.rc1 and openLDAP 2.1.22. I can join computers to the domain and authenticate to the domain without any problems. What I am having problems with is trying to do a group map so Domain Admins have administrative rights on the workstation when they login. I can get this to work on non LDAP setups by issuing net

Hello, Background: I recently upgraded a samba 2.8 system to samba 3.0 dl'ed from samba.org current. Everything works great except the group mapping and some net sessions that get stuck but I want to focus on the groupmap issue today. Things I have done: Delete group_mapping.tdb -- restarted samba -- net groupmap modify ntgroup='Domain Admins' unixgroup=ntadmins -- result: shows

Hi, I have just compiled and installed MIT krb5-1.6.3 and got a ticket with kinit: Ticket cache: FILE:/tmp/krb5cc_0 Default principal: craig@ABBOTT-SIMSES.LOCAL Valid starting Expires Service principal 01/09/08 18:27:06 01/10/08 01:07:06 krbtgt/ABBOTT-SIMSES.LOCAL@ABBOTT-SIMSES.LOCAL 01/09/08 18:31:18 01/10/08 01:07:06 term-jac$@ABBOTT-SIMSES.LOCAL Kerberos 4 ticket cache:

I am trying to replicate part of the function of the S-Plus terms.inner function. I don't need an entire model terms object but R expressions or character strings containing the innermost variable name given a vector of character strings or expressions. Here are some example inputs that each should result in the string or expression "x": x; x^2; g(x); h(g(x)); h(g(x^3));

Greetings, I have a problem with attr_accessor and create seemingly being at odds with each other in my environment. Here is the setup: A simple class representing a US State (say, Maine for example): class State < ActiveRecord::Base attr_accessor(:name, :code) end In an IRB session, I type the following and receive the response included below: >>

Firstly I apologise for the length of this query but I am hoping that if I document everything I did someone might respond / be able to help. My Configuration is Samba 3.0.2a as a PDC on Redhat 8. I cannot for the life of me get the "Domain Admins" functionality to work I am hoping that another set of eyes can shed some light on this problem as I have now spent 41 hrs googling /

yOn Tue, 24 Feb 2004, Vladimir Pekkel wrote: > Dear John. > > I looked through several threads @samba list-server. Still no answer to my > question - How to map several UNIX group to a single "ntgroup" with Samba > 3.0.2 Something identical to old smb.conf entry: domain admin > group=@ntadmins,@admins Samba-3.0.x does not support nested groups. - John T. -- John H

Hi, would be happy if somebody might help me with the following problem: I installed Samba as the Primary DC -- works perfectly, XP clients can join the domain, access the shares ... The domain users's primary group is the "users" Unix group. root is member of the "ntadmins" Unix group. Mapped the Unix groups to NT groups as follows: net groupmap modify

Relevant part of "net3 groupmap list" is System Operators (S-1-5-21-1617713866-2789119093-1479812082-1007) -> sys In howto there is the following example net groupmap modify ntgroup="System Operators" unixgroup=sys net groupmap modify ntgroup="Power Users" unixgroup=sys You can add System Operators but trying to add Power Users fails. If you do it in reverse

Hello, I'm using Samba3Beta1 and i try to map group. I create a posix group in my ldap: dn: cn=Administrateurs du domaine,ou=Groups,dc=middleearth,dc=ring objectClass: posixGroup cn: Administrateurs du domaine memberUid: root memberUid: administrateur gidNumber: 1000 And I try to map this group with the nt group : Domain Admins net groupmap add ntgroup="Domain Admins"

Hi, -----Original Message----- From: John H Terpstra [mailto:jht@samba.org] > "domain admin group" removed > > Because you now have something much more powerful that provides real NT > Groups to your NT/200x/XP clients. But if I use LDAP for both Samba and system auth. The groups, what I added with base.ldif (idealx) exist in samba and system. for example "getent

Hi, Everything I can find about using the ldapsam backend seems to imply that samba will be used as a domain controller. Is it possible to use ldapsam as the backend and have just a user level security workgroup? Thanks. Craig

Hi, Before Samba 3.0.0 RC4 I was running Samba 3.0.0 beta3, and when I upgraded to RC4, I began having problems with group mappings. I didn't notice at first, because on my laptop I don't normally log on to the domain. I just noticed when I tried to use my desktop and log on to the domain... I don't have Domain Admin privileges. So, I look at 'net groupmap list' ... and it

Hi all, I've scoured the net looking for a solution but to no avail. net groupmap list returns Domain Admins (S-############........) -> Domain Admins I would rather map Domain Admins to my root unix group. net groupmap modify ntgroup="Domain Admins" unixgroupreturns type=d returns an error; Could not update group database. If I delete via; net groupmap delete

When I do net groupmap add rid=514 ntgroup="Domain Guests" unixgroup=nobody type=d and then try to connect to a share called share which only allows guest connections with the following permissions: [global] guest account = nobody map to guest = bad user map to guest = bad password [share] path = /samba/admin force directory mode = 777

Hi, We have an Exchange server (server 2003) that is a domain controller and a few Samba file servers that are not part of the Windows domain. The Samba servers use their own LDAP directory ( ldapsam backend with pam_ldap ) that is synchronized to one openldap directory server but is not synchronized to the Windows domain AD. The workstations are all local accounts and not members of any domain

I have yet to get group mapping to work in samba 3.0. Getting very frustrated. I'm using openldap 2.1.23 as the backend database for samba 3.0.0. I've added the base domain groups as posixAccounts to the LDAP database using smbldap-populate.pl. root@lnxsrvr2:/usr/local/etc/openldap# ldapsearch -xv -b "o=30greatneck,dc=home,dc=net" # Administrator, Users, 30GreatNeck, home.net