similar to: net groupmap woes

Relevant part of "net3 groupmap list" is System Operators (S-1-5-21-1617713866-2789119093-1479812082-1007) -> sys In howto there is the following example net groupmap modify ntgroup="System Operators" unixgroup=sys net groupmap modify ntgroup="Power Users" unixgroup=sys You can add System Operators but trying to add Power Users fails. If you do it in reverse

Considering the following page... http://us3.samba.org/samba/docs/man/guide/small.html First of, my compliments to John for some great examples to study. In my mind I see three levels of security: 1) Linux - such as SSH'ing into the Linux server, Linux accounts and groups come into play here 2) Samba PDC - "Domain Admins" "Domain Users" come into play here. Examples

Hi I have samba 3.0.14a (debian/stable) and wonder where the problem is that running this command: # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=512 type=d gives: adding entry for group Domain Admins failed! but (note changed rid) # net groupmap add ntgroup="Domain Admins" unixgroup=ntadmins rid=1000 type=d works fine. Hm, winbind is not working, but I

Hi, Before Samba 3.0.0 RC4 I was running Samba 3.0.0 beta3, and when I upgraded to RC4, I began having problems with group mappings. I didn't notice at first, because on my laptop I don't normally log on to the domain. I just noticed when I tried to use my desktop and log on to the domain... I don't have Domain Admin privileges. So, I look at 'net groupmap list' ... and it

Hello, i have some problems migrating a Windows 2000 PDC to a Debian GNU/Linux Samba Server, i want to migrate it to a LDAP backend.. but as i'm kind of newbie with ldap and samba migration stuff, i preffered to migrate it to tdbsam first and try it for a while, if everything works fine, then switch to a ldap backend. The problem is that Essential Windows Groups are automatically created, so

Stephanie, Thank you for your help. I tryed what you suggest but no luck.. I get this: root@lnxsrvr2:~# /usr/local/samba/bin/net groupmap add ntgroup="Domain Admins" unixgroup="Domain Admins" rid=512 Can't lookup UNIX group Domain Admins Is there something with initial compiling samba 3.0.0 that would disable this? All the documentation that I've seen makes it look so

Hello, Second post: first had logs attached but was too big. I have a test environment with 1 windows 2000 AD domain pdc ( mixed mode install ), 1 linux server ( to become pdc ) and a win xp box to test logon when the migration was completed. The problem is no matter what I try after the migration the win xp's logonserver = windows server not linux server. I have no idea what is going

Hi I am new to linux & Samba. I would like to setup Samba as a domain controller and using Fedora-ds for authentication. I have read some documents from www.samba.org but I am still in the mist. Here is my dumb questions about Samba as follows. 1. Is CENTOS4.6+SAMBA3.0.25 as PDC +FEDORA-DS possible? 2. Is this HOWTO from

Hi Everyone, I have a small project going on. I'm about to migrate Redhat 7.3 to Debian Etch (smbd version 3.0.23d-2+b1). I've already managed to migrate Redhat 7.3 to Debian Sarge (smbd version 3.0.14a-) without any bigger problems. However, when I migrate to Etch I face a small problem. The last thing I want to do before I start samba is to grant my linux/samba admin, NT 'Domain

Firstly I apologise for the length of this query but I am hoping that if I document everything I did someone might respond / be able to help. My Configuration is Samba 3.0.2a as a PDC on Redhat 8. I cannot for the life of me get the "Domain Admins" functionality to work I am hoping that another set of eyes can shed some light on this problem as I have now spent 41 hrs googling /

Hello I have been solving a problem how to make a nonroot user able to administer the domain (add users, groups, modify them etc.) from Windows workstation using usrmgr.exe It looks like what is stated in Samba HOWTO collection as prerequisites is not enough. First I found Chapter 12 cxl "How to make Samba PDC users member of the Domain Admins group" - made the nonroot user member of

Hello. After fresh install. Samba and ldap seems to run normally ( I can join win2k workstation to linux samba pdc ). Using yast I create a system group named domadmin But I am unable to map "Domain Admins" to domadmin I am unable to map "Domain Admins" to existing ntadmin group I am unable to mofify mapping "Domain Admins" to domadmin group Thank you for

Hi list, If I have multiple Samba member servers in a domain can I store the groupmap data in LDAP? When I try this I get this error # net groupmap add ntgroup=Everyone unixgroup=nobody No rid or sid specified, choosing algorithmic mapping adding entry for group nobody failed! But this works correctly (creates account in LDAP server) smbpasswd -a username password the LDAP config in my

Hi list, I'm trying to set up a samba server and have run into a problem: Whenever I try to access a share other than /home/<user> I get a message saying that this resource is nonexistant on the server... I have problems getting "net groupmap modify" work, the commands I'm using is: net groupmap modify ntgroup="Domain Admins" unixgroup=root net groupmap modify

After reading through the documentation, I realized that as a part of the migration process from Samba-2.2.X to Samba-3.0.0 I needed to convert everyone in my smbadmin group (previously domain admin group = @smbadmin) to the "Domain Admins" group w/rid=512. So, I issued the following command: [root@localhost profile]# net groupmap modify ntgroup="Domain Admins"

Well, my Samba 3.0.4 is joined to a w2k AD and works fairly well so far, as it's not in a production environment yet. I am now testing it for such a release and have encountered a permission problem. Unless I chmod -R 777 the Samba share directroy, users can only read files on the share, including the ADS users in Domain Admins. Reading the Samba online manual, I figured the groupmap

Hi, i get this error when i run the net command to mapp unix group to nt groups. [root@samba smbldap-tools]# net3 groupmap add ntgroup=?Domain Admins? unixgroup=?Domain Admins? rid=512 Bad option: Admins? [root@samba smbldap-tools]# and also when i try to list the current groups in the domain, i get this error but i can see all entries if i use gq [root@samba smbldap-tools]# net3 groupmap

Greetings, My setup is a multimaster win2k domain with full trusts established. My samba server has joined one of the master domains as a member server. smb.conf has encrypted passwords enabled and security=domain and running on Samba Version 3.0.1pre1 on Linux 2.4.20-20.9smp. Groupmap seems not to work as I was expecting it to. I am trying to map the local unix group

Hi All, Just a general question about groups. I am upgrading a Samba workgroup, server to a PDC. I have been reading: http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/groupmapping.html#id2589321 In this link, they tell of how to map a windows group to a Samba group net groupmap add ntgroup="Domain Admins" unixgroup=domadm rid=512 type=d Question 1: if my previous

Hello all, I am having a some problems with groups. If I use this command "net rpc group list -Uroot%not24get" as the root users I get an error. "Could not connect to server 127.0.0.1 The username or password was not correct" If I try to add groups I also get the same error. and I don't know if this is relevent or not but when I try to join win groups and Unix groups