Mixed profiles w/Samba-PDC
Luke Kenneth Casson Leighton
lkcl at switchboard.net
Wed May 27 14:16:39 GMT 1998
On Wed, 27 May 1998, Gerald Carter wrote:
> Pierre-Jules Tremblay wrote:
> >
> > Okay, I figured out the problem (I think). I believe the way Samba
> > handles domain admin users is causing this (or maybe my understanding
> > is).
>
> I should document this. Has comes up several times.
>
> > It turns out in my example that both users were listed in the "domain
> > admin users" keyword. I discovered that the profile list in the
> > registry was being set wrong (see
> > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
> > NT\CurrentVersion\ProfileList). The key for both users A and B ended
> > up being the same, i.e. S-1-5-21-123-456-789-123-500. Now, 500 is the
> > uid of user A on the samba server, but I also noticed that the last
> > three digits of the local Administrator account are 500, is this a
> > coincidence?
>
> Nope. When you set "domain admin users", the RID for each user is set
> the well known ADMIN RID ( ie. 500 ) in the user info reply packet.
... which it should not: i should set the Primary Group to "domain admin
group". sorry
More information about the samba-ntdom
mailing list