R: Group mappings

Gerald Carter cartegw at Eng.Auburn.EDU
Thu Dec 24 05:41:54 GMT 1998

I am uploading it now.  Check the NTDOM FAQ linked 
off the documentation page on the samba site.  See
section 4.  Here's the bulk of it.

Thanks to David Bannon for send it to me. :-)

Hope this helps,


This has changed in the latest version of the HEAD branch.  The "domain
admin users" and "domain admin group" parameters have gone
away.  See the smb.conf man page for information on 

      * domain group map 
      * domain user map 
      * local group map 

Here are some sample notes...

To put users in the "Domain Admins" group 

      * Choose a suitable UNIX group, for example the group 
        "adm".  Add the following parameter to smb.conf 

       domain group map = /usr/local/samba/lib/domaingroup.map

      * Now create /usr/local/samba/lib/domaingroup.map and add 

       adm="Domain Admins"

      * In /etc/group (or the NIS map), put any user you want to 
        be a "Domain Admin" in the group "adm".  These users 
        will have Domain Admin rights on the workstations and 
        will, for example, have Domain Admins policy rules 
        (ie permissions) applied to them.  They can take 
        the workstation out of a domain, remove or edit 
        profiles on the machine etc. 

To add users to the local Administrator accounts on machines 

      * Add the following parameter to smb.conf 

       local group map = /usr/local/samba/lib/localgroup.map

      * Choose a suitable unix group, for example "wheel" and 
        add the following entry to the loca group map file 


      * Then in /etc/group (or the NIS map), any users that you 
        want to be local administrators must be in the 
        group "wheel". 

Now to map NT user accounts to unix accounts 

      * Add the following parameter to smb.conf 

       domain user map = /usr/local/samba/lib/domainuser.map

      * In the file /usr/local/samba/lib/domainuser.map put : 


      * Then run

        smbpasswd -a root

      and enter a password.

                            Gerald ( Jerry ) Carter	
Engineering Network Services                           Auburn University 
jerry at eng.auburn.edu             http://www.eng.auburn.edu/users/cartegw

       "...a hundred billion castaways looking for a home."
                                  - Sting "Message in a Bottle" ( 1979 )

More information about the samba-ntdom mailing list