Map UNIX User to NT Administrator user

[Dan Horth]

Hi, thanks for the ideas...

the "domain admin users" parameter sounds like it should work but doesn't...

I tried

domain admin users = admin

in my global section of smb.conf and restarted, logged in again, and 
- no administrator rights :(

I see what you're saying about the user map and group map though - 
makes sense now that I've re-read the docs along with your 
explanation.

May be these features are not available as part of the standard 2.07 release?

Hmm... may be I need to hassle the NT-DOM list members some more for clues!

any one else got any ideas? does anyone have this working?

thanks, dan.

At 2:23 AM +0200 4/19/01, Markus Amersdorfer wrote:
>On Thu, 19 Apr 2001 08:48:56 +1000
>Dan Horth <d.horth at tzlimited.com> wrote:
>
>>  I have the following in my [global] section of smb.conf
>>   username map = /etc/samba/domainuser.map
>>
>>  /etc/samba/domainuser.map looks like this:
>>   admin = Administrator
>>   dan = Administrator
>
>man smb.conf:
>  For  example  to  map  from the name "admin" or "administrator" to the
>  UNIX name "root" you would use:
>   root = admin administrator
>
>What you gain here is that the user logon names "admin" or
>"administrator" typed in at the Win-Logon-Prompt are mapped to the
>Unix-User "root".
>With
>  danny = "Dan Horth"
>you can log on to the Win-Client as "Dan Horth". The real Unix-User,
>owner of the files etc. will be "danny".
>
>>  if I'm off track here can someone enlighten me as to how to get the
>>  SAMBA domain logon server to tell the NT workstation logging in that
>>  I should have full administrator rights?
>
>Correct me if I'm wrong (I've never tried it myself), but I think what
>you're searching is not the parameter "username map ..." but
>  domain admin user = admin
>or
>  domain admin group = @admins
>
>The Unix-user "admin" or all members of the group "admins" will have
>Administrator-Rights on the NT-Client.
-- 
Telezygology
Manager, Technical Systems
Ph (+61 2) 992 992 88    Fx (+61 2) 992 991 88