domain groups = "Power Users"

David Woodhouse David.Woodhouse at mvhi.com
Thu Aug 20 15:13:05 GMT 1998


I've tried the subject line on my smb.conf (with a recent CVS copy of Samba) to
get the network users from the Samba PDC to be members of the "Power Users"
group. 

With the above line in smb.conf, smbd was complaining the "Power" was not a
well-known RID alias. So I ran smbd through sed "s/Power Users/Power_Users/" and
edited smb.conf accordingly.

Now it thinks it's telling the NT box (NT4 SP3) that I'm in the group Power
Users (547 = 0x223), as far as I can tell, but said NT box still doesn't
register me as being in any group but "\Everyone"

Here's an extract from the debug output of smbd at level 9...

getsmbfilepwent: returning passwd entry for user devel1$, uid 600
getsmbfilepwent: returning passwd entry for user devel2$, uid 601
getsmbfilepwent: returning passwd entry for user devel3$, uid 602
getsmbfilepwent: returning passwd entry for user devel4$, uid 603
getsmbfilepwent: returning passwd entry for user server$, uid 605
getsmbfilepwent: returning passwd entry for user gaet1$, uid 606
getsmbfilepwent: returning passwd entry for user angelo, uid 2000
getsmbfilepwent: returning passwd entry for user marg, uid 2001
getsmbfilepwent: returning passwd entry for user david, uid 2002
getsmbfilepwent: returning passwd entry for user marom, uid 2003
getsmbfilepwent: returning passwd entry for user gaet, uid 2004
getsmbfilepwent: returning passwd entry for user dwmw2, uid 2005
endsmbfilepwent: closed password file.
Home server: server
Home server: server
domain group access  513/7  granted
make_dom_gids: Power_Users 513/7 
group id: 547 attr: 7
group id: 513 attr: 7
make_dom_sid2s: 
000000 net_io_r_sam_logon 
    811a620 buffer_creds: 00000001
    000004 smb_io_cred 
        000004 smb_io_chal 
            811a620 data: 4d df 2c 9e 80 7e 22 2c 
        00000c smb_io_utime 
            811a620 time: 00000000
    811a620 switch_value: 0003
    000014 lsa_io_lsa_user_info 
        811a620 ptr_user_info : 00000001
        000018 smb_io_time time
            811a620 low : ffffffff
            811a620 high: 7fffffff
        000020 smb_io_time time
            811a620 low : ffffffff
            811a620 high: 7fffffff
        000028 smb_io_time time
            811a620 low : ffffffff
            811a620 high: 7fffffff
        000030 smb_io_time time
            811a620 low : ffffffff
            811a620 high: 7fffffff
        000038 smb_io_time time
            811a620 low : ffffffff
            811a620 high: 7fffffff
        000040 smb_io_time time
            811a620 low : ffffffff
            811a620 high: 7fffffff
        000048 smb_io_unihdr unihdr
            811a620 uni_str_len: 000a
            811a620 uni_max_len: 000a
            811a620 buffer     : 00000004
        000050 smb_io_unihdr unihdr
            811a620 uni_str_len: 000c
            811a620 uni_max_len: 000c
            811a620 buffer     : 00000004
        000058 smb_io_unihdr unihdr
            811a620 uni_str_len: 0014
            811a620 uni_max_len: 0014
            811a620 buffer     : 00000004
        000060 smb_io_unihdr unihdr
            811a620 uni_str_len: 002c
            811a620 uni_max_len: 002c
            811a620 buffer     : 00000004
        000068 smb_io_unihdr unihdr
            811a620 uni_str_len: 001c
            811a620 uni_max_len: 001c
            811a620 buffer     : 00000004
        000070 smb_io_unihdr unihdr
            811a620 uni_str_len: 0000
            811a620 uni_max_len: 0000
            811a620 buffer     : 00000004
        811a620 logon_count   : 0000
        811a620 bad_pw_count  : 0000
        811a620 user_id       : 00001392
        811a620 group_id      : 00001393
        811a620 num_groups    : 00000002
        811a620 buffer_groups : 00000001
        811a620 user_flgs     : 00000020
        811a620 user_sess_key: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
        0000a0 smb_io_unihdr unihdr
            811a620 uni_str_len: 000c
            811a620 uni_max_len: 000c
            811a620 buffer     : 00000004
        0000a8 smb_io_unihdr unihdr
            811a620 uni_str_len: 000a
            811a620 uni_max_len: 000a
            811a620 buffer     : 00000004
        811a620 buffer_dom_id : 00000001
        811a620 padding       : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
        811a620 num_other_sids: 00000000
        811a620 buffer_other_sids: 00000000
        0000e4 smb_io_unistr2 unistr2
            811a620 uni_max_len: 00000006
            811a620 undoc      : 00000000
            811a620 uni_str_len: 00000006
            811a620 buffer     : d.w.m.w.2...
        0000fc smb_io_unistr2 unistr2
            811a620 uni_max_len: 00000007
            811a620 undoc      : 00000000
            811a620 uni_str_len: 00000007
            811a620 buffer     : N.o.b.o.d.y...
        000116 smb_io_unistr2 unistr2
            811a620 uni_max_len: 0000000b
            811a620 undoc      : 00000000
            811a620 uni_str_len: 0000000b
            811a620 buffer     : d.e.v.e.l.8...b.a.t...
        00013a smb_io_unistr2 unistr2
            811a620 uni_max_len: 00000017
            811a620 undoc      : 00000000
            811a620 uni_str_len: 00000017
            811a620 buffer     : \.\.s.e.r.v.e.r.\.d.w.m.w.2.\.p.r.o.f.i.l.e...
        000176 smb_io_unistr2 unistr2
            811a620 uni_max_len: 0000000f
            811a620 undoc      : 00000000
            811a620 uni_str_len: 0000000f
            811a620 buffer     : \.\.s.e.r.v.e.r.\.d.w.m.w.2...
        0001a2 smb_io_unistr2 unistr2
            811a620 uni_max_len: 00000001
            811a620 undoc      : 00000000
            811a620 uni_str_len: 00000001
            811a620 buffer     : ..
        811a620 num_groups2   : 00000002
        0001b8 smb_io_gid 
            811a620 g_rid: 00000223
            811a620 attr : 00000007
        0001c0 smb_io_gid 
            811a620 g_rid: 00000201
            811a620 attr : 00000007
        0001c8 smb_io_unistr2 unistr2
            811a620 uni_max_len: 00000007
            811a620 undoc      : 00000000
            811a620 uni_str_len: 00000007
            811a620 buffer     : S.E.R.V.E.R...
        0001e2 smb_io_unistr2 unistr2
            811a620 uni_max_len: 00000006
            811a620 undoc      : 00000000
            811a620 uni_str_len: 00000006
            811a620 buffer     : A.X.I.O.M...
        0001fc smb_io_dom_sid2 
            811a620 num_auths: 00000004
            000200 smb_io_dom_sid sid
                811a620 sid_rev_num: 01
                811a620 num_auths  : 04
                811a620 id_auth[0] : 00
                811a620 id_auth[1] : 00
                811a620 id_auth[2] : 00
                811a620 id_auth[3] : 00
                811a620 id_auth[4] : 00
                811a620 id_auth[5] : 05
                811a620 sub_auths : 00000015 34a3888e 2915f681 0afc61bf 
    811a620 auth_resp   : 00000001
    811a620 status      : 00000000
create_rpc_reply: data_start: 0 data_end: 544 max_tsize: 5680
000000 smb_io_rpc_hdr hdr
    8119a40 major     : 05
    8119a40 minor     : 00
    8119a40 pkt_type  : 02
    8119a40 flags     : 03
    8119a40 pack_type : 00000010
    8119a40 frag_len  : 0238
    8119a40 auth_len  : 0000
    8119a40 call_id   : 00000004
000010 smb_io_rpc_hdr_resp resp
    8119a40 alloc_hint: 00000220
    8119a40 context_id: 0000
    8119a40 cancel_ct : 00
    8119a40 reserved  : 00
copy_trans_params_and_data: params[0..0] data[0..568]
size=623
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=1
smb_tid=12
smb_pid=51966
smb_uid=101
smb_mid=15360
smt_wct=10
smb_vwv[0]=0 (0x0)
smb_vwv[1]=568 (0x238)
smb_vwv[2]=0 (0x0)
smb_vwv[3]=0 (0x0)
smb_vwv[4]=55 (0x37)
smb_vwv[5]=0 (0x0)
smb_vwv[6]=568 (0x238)
smb_vwv[7]=55 (0x37)
smb_vwv[8]=0 (0x0)
smb_vwv[9]=0 (0x0)
smb_bcc=568
write_socket(7,627)
write_socket(7,627) wrote 627
got message type 0x0 of len 0x9a
1998/08/20 15:57:57 Transaction 243 of length 158
size=154
smb_com=0x73
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=24
smb_flg2=3
smb_tid=0
smb_pid=51966
smb_uid=0
smb_mid=15424
smt_wct=13
smb_vwv[0]=255 (0xFF)
smb_vwv[1]=154 (0x9A)
smb_vwv[2]=61440 (0xF000)
smb_vwv[3]=50 (0x32)
smb_vwv[4]=1 (0x1)
smb_vwv[5]=4241 (0x1091)
smb_vwv[6]=0 (0x0)
smb_vwv[7]=24 (0x18)
smb_vwv[8]=24 (0x18)
smb_vwv[9]=0 (0x0)
smb_vwv[10]=0 (0x0)
smb_vwv[11]=212 (0xD4)
smb_vwv[12]=0 (0x0)
smb_bcc=93
switch message SMBsesssetupX (pid 4241)
chdir to /var/log
unbecome_user now uid=(0,0) gid=(0,0)


----                              ----                              ----
David Woodhouse        David.Woodhouse at mvhi.com       Office: (+44) 1223 812896 
 Project Leader,     Process Information Systems      Mobile: (+44) 976 658355
    Axiom (Cambridge) Ltd., Swaffham Bulbeck, Cambridge, CB5 0NA, UK.
             finger dwmw2 at ferret.lmh.ox.ac.uk for PGP key.




More information about the samba-ntdom mailing list