[Samba] Domain Admins
Bradley W. Langhorst
brad at langhorst.com
Mon Oct 7 21:54:01 GMT 2002
On Mon, 2002-10-07 at 17:38, Irving Carrion wrote:
> I've read man smbgroupedit many times, over and over and OVER, and have
> done step by step per the man page with no luck. I thought maybe it
> would be easier for one to help if they saw what I was doing. So I
> posted a partial listing of group,passwd,smb.conf below.
>
> Plz, plz, really need some help with this!
>
> Thanks!
> IRV
>
>
> I have Samba Version 2.999+3.0.alpha from the debian unstable archives.
>
>
> //BEGIN /ETC/GROUP
> domainadmins:x:1001:administrator,user1,user2
> //END /ETC/GROUP
>
> //BEGIN /ETC/PASSWD
> administrator:x:1218:1001:Administrator,,,:/home/administrator:/bin/bash
>
> user1:x:1219:1001:User 1,,,:/home/user1:/bin/bash
> user2:x:1220:1001:User 2,,,:/home/user2:/bin/bash
> //END /ETC/PASSWD
>
> HERE IS THE OUTPUT of "smbgroupedit -vs | grep "Domain Admins""
> Domain Admins (S-1-5-21-2879687004-3117605197-2714178016-512) ->
> domainadmins
>
>
>
did you make your domain admins a domain group with -td?
just run smbgroupedit -td to see the domain groups...
> admin users = @domainadmins
have you tried without this line?
how are you assessing whether this is working or not?
i consider the mapping to work if i can specify
one of my domain groups as a part of a local group and
the rsop tool says that a member of that group has the appropriate
permissions...
i'm not using domain admins - do you maybe need to add it the local
admins group?
brad
More information about the samba
mailing list