Upgrade issue with 3.0.21b->3.0.22

Gerald (Jerry) Carter jerry at samba.org
Wed Feb 8 23:17:12 GMT 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Gerald (Jerry) Carter wrote:
> Backing up a little.  The concept of a primary group
> has been deprecated in AD unless you have "Mac or
> POSIX compliant applications" (from the MMC Users and
> Computer plugin in Windows 2003).

This was surprising to me.  Connect to a standalone NT4
workstation.

rpcclient $> lookupnames test
test S-1-5-21-1924756635-1969438570-313073093-1001 (User: 1)
rpcclient $> queryusergroups 1001
group rid:[0x201] attr:[0x7]

rpcclient $> lookupsids S-1-5-21-1924756635-1969438570-313073093-513
S-1-5-21-1924756635-1969438570-313073093-513 TEST1\None (2)

rpcclient $> enumalsgroups domain
rpcclient $> enumalsgroups builtin
group:[Administrators] rid:[0x220]
group:[Backup Operators] rid:[0x227]
group:[Guests] rid:[0x222]
group:[Power Users] rid:[0x223]
group:[Replicator] rid:[0x228]
group:[Users] rid:[0x221]

And yet in the NT4 musrmgr.exe, the user 'test' appears in
only one group--'Users'






cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFD6nv3IR7qMdg1EfYRAhRdAJ9/qYVdJMAvOmwsOeQlEBHHbxAZ3wCeMAWX
JnZ4IdvJmJFBtj2KIu9rX9Q=
=hXzn
-----END PGP SIGNATURE-----


More information about the samba-technical mailing list