smbgroupedit/pdbedit in SAMBA_3 behavior

Gerald (Jerry) Carter jerry at samba.org
Wed Apr 23 19:56:14 GMT 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, 23 Apr 2003, Ignacio Coupeau wrote:

> I'm testing the smbgroupedit and as you can see, in the samba-3.0alpha20 
> the command lists (as ever) the local/builtin groups:
> 
> bin/smbgroupedit -v
> ---------------------------------------
> NT group (SID) -> Unix group
> System Operators (S-1-5-32-549) -> -1
> Replicators (S-1-5-32-552) -> -1
> Guests (S-1-5-32-546) -> -1
> Power Users (S-1-5-32-547) -> -1
> Print Operators (S-1-5-32-550) -> -1
> Administrators (S-1-5-32-544) -> -1
> Account Operators (S-1-5-32-548) -> -1
> Backup Operators (S-1-5-32-551) -> -1
> Domain Users (S-1-5-21-298858960-1863792627-3661451959-513) -> -1
> Users (S-1-5-32-545) -> -1
> Domain Admins (S-1-5-21-298858960-1863792627-3661451959-512) -> admins
> Domain Guests (S-1-5-21-298858960-1863792627-3661451959-514) -> nobody
> ---- eof ----
> 
> but not in the a23 nor CVS (today, 12:00 am GMT):
> 
> bin/smbgroupedit -v
> -------------
> NT group (SID) -> Unix group
> ---- eof ---

You don't have any mappings in LDAP.  Checkout the latest SAMBA_3_0
and run 'net groupmap' (there's not docs on this yet, but I'm working on 
it.  It is a recent change).

Here's the LDIF for my Domain Admins groups

  # domadmin, group, plainjoe, org
  dn: cn=domadmin,ou=group,dc=plainjoe,dc=org
  objectClass: posixGroup
  objectClass: sambaGroupMapping
  cn: domadmin
  gidNumber: 1002
  ntSid: S-1-5-21-2547222302-1596225915-2414751004-512
  ntGroupType: 2
  displayName: Domain Admins
  memberUid: jerry







cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+pu/hIR7qMdg1EfYRAus7AKCNaKA+0SlMBMxxoRzXkZOWkICDiACffl2Z
ZvyAdWpcMTWdHJYYksPN4aA=
=kGGs
-----END PGP SIGNATURE-----



More information about the samba-technical mailing list