[Samba] domain admins and Samba 3.0.2

[Gémes Géza]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Janet Dickson írta:

| Hi
|
| I've been running Samba 2.x for years but decided to move up to 3.0.2.
| I've set up a new samba server with a workgroup NEWBIOSS and netbios
| name PARETO.
| Im having problems setting up my domain admins.
| I used
| 'net groupmap modify "Domain Admins" unixgroup=domadmin'
|
| my 'net groupmap list' shows :
| System Operators (S-1-5-32-549) -> -1
| Replicators (S-1-5-32-552) -> -1
| Guests (S-1-5-32-546) -> -1
| Domain Users (S-1-5-21-1375496003-1846269575-2512961765-513) -> -1
| Power Users (S-1-5-32-547) -> -1
| Print Operators (S-1-5-32-550) -> -1
| Administrators (S-1-5-32-544) -> -1
| Account Operators (S-1-5-32-548) -> -1
| Domain Admins (S-1-5-21-1375496003-1846269575-2512961765-512) -> domadmin
| Backup Operators (S-1-5-32-551) -> -1
| Domain Guests (S-1-5-21-1375496003-1846269575-2512961765-514) -> -1
| Users (S-1-5-32-545) -> -1
|
| net getlocalsid
| SID for domain PARETO is: S-1-5-21-1375496003-1846269575-2512961765
|
| ypcat group |grep domadmin
| domadmin:*:60:janet,myles,alec
|
| user janet is in group 60
|
| On the PC (Win 2K) it says :
| You are logged in as NEWBIOSS\janet, which is not a member of the
| Administrators group
|
| But when I check under 'Local Users and Groups' Administrator
| properties, it includes
| NEWBIOSS\Domain Admins(S-1-5-21-1375496003-184...
|
| I've checked out the thread about domain admins in January, but cannot
| see where I'm going wrong. I've been running samba 2.2.5 with
| 'domain admin group = root @domadmin' in smb.conf for ages with no
problems
|
| Can anyone help ?
|
| I have a huge level 3 debug if anyone can understand it.
|
|     Janet

Hi,

You haven't mapped your Domain Users, and Domain Guests group, which
could confuse your Windows clients

Cheers,

Geza
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFAYuIJ/PxuIn+i1pIRAgnCAJ9cm0CuBc0GHerpjvp0irmBDXZ5LQCfbD16
EfkZ8X03A37HlllhxYwoZFg=
=GhLG
-----END PGP SIGNATURE-----