similar to: Not seeing the expected group memberships with ifmember.exe /list

Considering the following page... http://us3.samba.org/samba/docs/man/guide/small.html First of, my compliments to John for some great examples to study. In my mind I see three levels of security: 1) Linux - such as SSH'ing into the Linux server, Linux accounts and groups come into play here 2) Samba PDC - "Domain Admins" "Domain Users" come into play here. Examples

I am testing out Debian Etch, and ran into an issue granting SeMachineAccountPrivilege to an account... which granting that permission had been troublesome in the past. The command I am issuing is: net rpc rights grant LDS-DEMO\\ldsinst SeMachineAccountPrivilege And I try running the command with an account that is a member of the "Domain Admins" group. The command returns: Failed to

Typical Linux Distros add all sorts of Unix groups to users when it creates them, like cdrom, floppy, dialout, audio, etc... Logging in to the domain from Windows with an account that has such membership over on Linux... "ifmember.exe /list" shows all of those memberships. Why exactly? I would expect only the groups I did a "net groupmap" on would be considered by Samba.

Dear all I have install samba + ldap and it is successfully joing the domain but problem is when i login in XP machine with Administrator account of samba i cannot change anything in XP even not system time so is it problem of privileges ?? $ cat ~/satish/url.txt http://www.linuxbug.org

Long day yesterday for us here, first production implementation of Samba has to be rolled out and the client's old network reinstalled... cause: this "access deneied" issue which seems to be randomly affecting Samba implementations and from what I can see folks say Samba 3.0.2 was the last good build. If that describes you, please test this as I have come up with a way to turn the

I have a share which a group write list. That group is mapped to a Linux group in /etc/group. That group in Linux has two users. The first user listed is suddenly unable to write, but the second one is. With the affected user logged in to Win2K, ifmember /list shows they are a member of the group, as does the working account. I am guessing one of those .tdb files or something got scrambled on the

I found the solution, or at least a work around, for my posting: "Can not grant SeMachineAccountPrivilege on Debian Etch" I ended up: 1) ssh to Debian Etch as root 2) smbpasswd -a root 3) issue the "net rpc rights grant ..." command SUCCESS!!! So, that raises the question that what MUST be executed as user root verses a member of ntgroup="Domain Admins"? I suspect

First off, on the Windows side I use "ifmember.exe /list" to check the group membership in affect for the currently logged in domain user, works like a charm. However, Linux side is another story, specifically the net command. We have, among others, the following mapping in place: net groupmap modify ntgroup="Domain Admins" unixgroup=domadmin Based on this documentation:

Hi! I'm experiencing some serious problems setting up Samba as PDC. File sharing works fine and I can even add my computer to the domain, but when I reboot I can't log in with my samba username and password. I've previously set up similiar server, though it wasn't trough VPN. I'm running latest Debian Etch with every package upgraded. I've also tried some older samba

Hello Mailinglist, I have created a local user "localuser" who is in the local group "localgroup" $ id uid=1001(localuser) gid=1001(localgroup) groups=1001(localgroup) My machine authenticates against Active Directory - works The AD-User "aduser" belongs to a domain group "adgroup" $ id uid=6161(aduser) gid=5513(dom?nen-benutzer)

Hello fellow list members, does anyone knows of a good HOWTO (or a book) for setting up Samba as a PDC? I have been dealing around with the Samba HOWTO collection, but to be honest, this is a hard job. There are some errors in it and descriptions are not this good. I even don't know what all the tools are for. I'm really experienced in Linux server stuff, but this one drives me mad.

Greetings- I have not found discussed / documented what to do with machine accounts when moving a Samba PDC to new hardware. I have seen that uid/gid numbers must match between the old/new system. I am thinking to use adduser to accomplish that, then make the numbers on the new server match, using a text editor. After that, can I simply enter the machine account entries by hand with a text

Greetings- I am wondering if anyone from the Samba team would happen to have interest in creating official builds for Ubuntu? To add a twist, unfortunately I would not be fishing for 7.10 packages, but rather 7.04 as we ran into too many issues with 7.10 whereas 7.04 seems rock solid stable. Or, are there packages built of Samba releases for Ubuntu external to samba.org? Thanks, -- Michael

<rant>Every time I set up a new test Samba server, the step to "net rpc rights grant..." ALWAYS fights me tooth and nail... ALWAYS with a different error message. I've even created little scripts to run so I am not typing commands incorrectly... but NNNOOOOOO, the script to grand rights to one stink'n account always has to complain!</rant> OK, this time it is...

Greetings- I am working through coming up with a Linux client integration to Samba PDC's. I mount several shares with this sort of syntax: /bin/mount -t cifs -o credentials=/home/userid/.smbcredentials,uid=userid,gid=userid,dmask=0777,fmask=0666 //ldslnx01/data /mnt/ldslnx01/data/ However when I create new files/dirs on the Samba share from the Linux workstation, the perms are not 0666/0777

Hello, i updated my samba to version 3.0.20 on a suse 9.2 system. I thought, some new net rpc commands need samba 3.0.13. But I get faults with the command: amd:~ # net rpc rights grant testuser10 SeMachineAccountPrivilege [2005/08/25 02:45:35, 0] param/loadparm.c:map_parameter(2536) Unknown parameter encountered: "enables privileges" [2005/08/25 02:45:35, 0]

I am somewhat confused... I understand that the preferred method to mount a Samba share with a Linux client is to use "mount -t cifs" rather than "mount -t smbfs". I get the impression that smbfs is samba.org developed code where as cifs is from elsewhere. Thus the point of confusion. Why is samba.org not developing the preferred code in this case? A sub question to that

One of the servers we admin has countless such errors in log.smbd: [2007/05/07 14:17:08, 0] tdb/tdbutil.c:tdb_log(783) tdb(/var/cache/samba/printing/HPLJ3600.tdb): rec_read bad magic 0x443810ec at offset=28412 The only thread I saw regarding "rec_read" stated: <><><><><> If this really happens often to you, then you have some basic problems with your

Recent list messages got me thinking... Is there a way to support both local and roaming profile with one server / domain? As I understand it, the "magic" line that tells Samba not to do roaming profiles is the smb.conf line: logon path = Which the line must exist, and must be set to null. But that is in the global section. So is there a way to support both local and roaming...

Firstly I apologise for the length of this query but I am hoping that if I document everything I did someone might respond / be able to help. My Configuration is Samba 3.0.2a as a PDC on Redhat 8. I cannot for the life of me get the "Domain Admins" functionality to work I am hoping that another set of eyes can shed some light on this problem as I have now spent 41 hrs googling /