Mixed profiles w/Samba-PDC

Luke Kenneth Casson Leighton lkcl at switchboard.net
Wed May 27 14:16:39 GMT 1998


On Wed, 27 May 1998, Gerald Carter wrote:

> Pierre-Jules Tremblay wrote:
> > 
> > Okay, I figured out the problem (I think).  I believe the way Samba
> > handles domain admin users is causing this (or maybe my understanding 
> > is).
> 
> I should document this.  Has comes up several times.
> 
> > It turns out in my example that both users were listed in the "domain
> > admin users" keyword.  I discovered that the profile list in the
> > registry was being set wrong (see
> > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
> > NT\CurrentVersion\ProfileList).  The key for both users A and B ended
> > up being the same, i.e. S-1-5-21-123-456-789-123-500.  Now, 500 is the
> > uid of user A on the samba server, but I also noticed that the last
> > three digits of the local Administrator account are 500, is this a
> > coincidence?
> 
> Nope.  When you set "domain admin users", the RID for each user is set
> the well known ADMIN RID ( ie. 500 ) in the user info reply packet.

... which it should not: i should set the Primary Group to "domain admin
group".  sorry



More information about the samba-ntdom mailing list