[Samba] Can not Rights to users

Savaş İREZ si at z-sistem.com
Fri Dec 17 07:38:47 GMT 2004


Hi,

I've configured samba with ldap support and all is going well with 
normal users.

I wanted to know how to give special right/privileges to users using any 
windows tool.

I tried to use w2k's support tool (Active Directory Users and Computers) 
and nt's srvtools(usermgr)
but none of these worked. win2k says "can not connect to pre-windows 
2000 domain"
nt connects and gets everything as expected but it just can not 
set/change anything (except password and some user flags).
When i try to change group membership and add user to "Domain Admins" 
group is says "The Group name can not be found"

users is the output of my groupmap list.

Domain Admins (S-1-5-21-4276035903-123456789-2739979074-512) -> Domain 
Admins
Domain Users (S-1-5-21-4276035903-123456789-2739979074-513) -> Domain Users
Domain Guests (S-1-5-21-4276035903-123456789-2739979074-514) -> Domain 
Guests
Administrators (S-1-5-21-4276035903-123456789-2739979074-544) -> 
Administrators
users (S-1-5-21-4276035903-123456789-2739979074-545) -> users
Guests (S-1-5-21-4276035903-123456789-2739979074-546) -> Guests
Power Users (S-1-5-21-4276035903-123456789-2739979074-547) -> Power Users
Account Operators (S-1-5-21-4276035903-123456789-2739979074-548) -> 
Account Operators
Server Operators (S-1-5-21-4276035903-123456789-2739979074-549) -> 
Server Operators
Print Operators (S-1-5-21-4276035903-123456789-2739979074-550) -> Print 
Operators
Backup Operators (S-1-5-21-4276035903-123456789-2739979074-551) -> 
Backup Operators
Replicator (S-1-5-21-4276035903-123456789-2739979074-552) -> Replicator
Domain Computers (S-1-5-21-4276035903-123456789-2739979074-553) -> 
Domain Computers

Users are created with the membership of "users" group by default.

# id savas
uid=1014(savas) gid=545(users) groups=545(users)

Am i supposed to give membership from unix as well? like say "Domain 
Admins" ?

As a reminder, i can use shares, and can logon to samba pdc domain with 
users successfully, what i cant do is, change some settings of users 
using some tool.
I'm starting to wonder if there is another tool for samba pdc?

Thanks.


More information about the samba mailing list