[Samba] Trouble with groups

[Robert Rapp]

I agree, it felt messy.  By the time I got here I was just trying to 
pile more junk on top to reach the sky. :)

Just to be clear, the "domain admin group" directive expects samba 
users, not unix users and not unix groups correct?

I've found that the "Using Samba" book published by O'Reilly seems to be 
a bit light in documentation when it comes to using Samba as a PDC.

http://www.oreilly.com/catalog/samba/chapter/book/

Do you have a book you recommend or another source?  I've also found the 
samba.org docs a little light when looking for PDC issues.

Noel Kelly wrote:

>This sounds awfully messy Bert.  All those mappings might not be necessary.
>
>I setup a Samba PDC the other week for a customer and we simply used the
>'domain admin group =' parameter like this:
>
>domain admin group = admin nkelly root and other samba users
>
>This means when I (nkelly) log in on a workstation I have complete control
>over it.
>
>HTH
>Noel
>
>
>
>
>-----Original Message-----
>From: Bert Rapp [mailto:bert at rappsonline.com]
>Sent: 05 November 2002 19:13
>To: Samba List
>Subject: Re: [Samba] Trouble with groups
>
>
>Have I wandered into uncharted territory?  They has to be someone out 
>there that can point me in the right direction.  Please help me.  :)
>
>Bert Rapp wrote:
>
>  
>
>>I'm having trouble getting myself in to the administrators group.  I'm 
>>using samba as a domain controller.  I have a samba account called 
>>administrator.  I have these settings in my smb.conf::
>>
>>domain group map = /etc/samba/groups.mapping
>>domain user map = /etc/samba/domainuser.mapping
>>local group map = /etc/samba/localgroup.mapping
>>
>>
>>This is in my domainuser.mapping to alias the administrator samba 
>>account to the linux root account:
>>root = \\NORTHTRAILRV\\Administrator
>>
>>This is in my groups.mapping to alias admins to the Administrators groups
>>admins = Administrators
>>
>>This is the group listing in /etc/group:
>>admins:x:200:root
>>
>>And for fun I have a local group mapping like this:
>>admins = BUILTIN\Administrators
>>
>>For some reason though, when I log on to the domain as administrator, 
>>I still do not have permission to change the time or anything else.
>>
>>Does anyone have any suggestions?
>>
>>    
>>
>
>  
>