[Samba] New Samba GroupMapping

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

CAT wrote:
> Hello List,
>
>
> In my logfile I found:
>
> Sep 11 18:40:58 gateway smbd[92133]: [2006/09/11 18:40:58, 0]
> auth/auth_util.c:create_builtin_administrators(785)
> Sep 11 18:40:58 gateway smbd[92133]:   create_builtin_administrators:
> Failed to create Administrators
> Sep 11 18:40:58 gateway smbd[92133]: [2006/09/11 18:40:58, 0]
> auth/auth_util.c:create_builtin_users(751)
> Sep 11 18:40:58 gateway smbd[92133]:   create_builtin_users: Failed to
> create Users

These are bogus error messages if you are using an
idmap backend other than tdb or ldap.  I've raised the
log level in the next release.

>
>
> Group Mapping Changes
> =====================
>
> The default mapping entries for groups such as "Domain Admins" are
> no longer created when using an smbpasswd file or a tdbsam passdb
> backend.  This means that it is necessary to use 'net groupmap
> add' rather than 'net groupmap modify' to set these entries.  This
> change has no effect on winbindd's IDmap functionality for
> domain groups.
>
> What does that means?

It means that we don't create the those SID -> -1 entries
in group_mapping.tdb anymore by default.  the ldapsam
backend has always worked this way.

> # net usersidlist
> [2006/09/14 12:30:00, 0] utils/net_rpc.c:net_usersidlist(4716)
> Could not get the user/sid list
>
> Why? I foudn no answer in the web.


ERRnotenoughinfo




cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFDeNIIR7qMdg1EfYRAjNWAJ0S39SQ+vqkK8NL6Fs8tYwTZq3bEwCgxcSZ
VZE/QJpzy7tgxwpiR6SxuiU=
=1VGm
-----END PGP SIGNATURE-----