Inconsistency between groupmap "Domain Admins" and _lsa_add_acct_rights() checking

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Nik Conwell wrote:
> 
> On May 2, 2007, at 9:19 AM, Gerald (Jerry) Carter wrote:
> 
>> Specify the full sid instead of just the rid to "net groupmap add".
>> The HOWTO is for a Samba DC IIRC.
> 
> Thanks for the info.  Looks like you're right on the HOWTO.  I
> generalized it to AD.
> 
> Is what I'm trying to do unusual, or is it just obvious 
> that I should know to specify the full sid?

The recommended solution for mapping domain groups on a
member server is to run winbindd :-)

The net groupmap trick is semi-obvious but not dings against
you for not seeing it :-)




cheers, jerry
=====================================================================
Samba                                    ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGOKHlIR7qMdg1EfYRAuZ3AJ0Yo0kw27pQq4dVUsxGBFcGjuho/ACeOzHi
cxjgCHnqj6m3YG3RQJf4Cp8=
=sbLE
-----END PGP SIGNATURE-----