[Samba] Trouble with groups

[Noel Kelly]

Yes Using Samba is pretty out of date now with the recent advances.  I would
take a look at the some of the howtos on the Samba site
(http://samba.mirror.ac.uk/samba/docs/), in particular these two are very
good:

http://hr.uoregon.edu/davidrl/samba.html

http://samba.mirror.ac.uk/samba/docs/Samba-HOWTO-Collection.html


Also I would print out the smb.conf man page and browse it as a reference.
The SWAT tool does a nice job of categorising the  smb.conf commands under
headings which are also excellent for try it and see stuff.

HTH
Noel



-----Original Message-----
From: Robert Rapp [mailto:bert at rappsonline.com]
Sent: 07 November 2002 02:33
To: Noel Kelly
Cc: Samba List
Subject: Re: [Samba] Trouble with groups


I agree, it felt messy.  By the time I got here I was just trying to 
pile more junk on top to reach the sky. :)

Just to be clear, the "domain admin group" directive expects samba 
users, not unix users and not unix groups correct?

I've found that the "Using Samba" book published by O'Reilly seems to be 
a bit light in documentation when it comes to using Samba as a PDC.

http://www.oreilly.com/catalog/samba/chapter/book/

Do you have a book you recommend or another source?  I've also found the 
samba.org docs a little light when looking for PDC issues.

Noel Kelly wrote:

>This sounds awfully messy Bert.  All those mappings might not be necessary.
>
>I setup a Samba PDC the other week for a customer and we simply used the
>'domain admin group =' parameter like this:
>
>domain admin group = admin nkelly root and other samba users
>
>This means when I (nkelly) log in on a workstation I have complete control
>over it.
>
>HTH
>Noel
>
>
>
>
>-----Original Message-----
>From: Bert Rapp [mailto:bert at rappsonline.com]
>Sent: 05 November 2002 19:13
>To: Samba List
>Subject: Re: [Samba] Trouble with groups
>
>
>Have I wandered into uncharted territory?  They has to be someone out 
>there that can point me in the right direction.  Please help me.  :)
>
>Bert Rapp wrote:
>
>  
>
>>I'm having trouble getting myself in to the administrators group.  I'm 
>>using samba as a domain controller.  I have a samba account called 
>>administrator.  I have these settings in my smb.conf::
>>
>>domain group map = /etc/samba/groups.mapping
>>domain user map = /etc/samba/domainuser.mapping
>>local group map = /etc/samba/localgroup.mapping
>>
>>
>>This is in my domainuser.mapping to alias the administrator samba 
>>account to the linux root account:
>>root = \\NORTHTRAILRV\\Administrator
>>
>>This is in my groups.mapping to alias admins to the Administrators groups
>>admins = Administrators
>>
>>This is the group listing in /etc/group:
>>admins:x:200:root
>>
>>And for fun I have a local group mapping like this:
>>admins = BUILTIN\Administrators
>>
>>For some reason though, when I log on to the domain as administrator, 
>>I still do not have permission to change the time or anything else.
>>
>>Does anyone have any suggestions?
>>
>>    
>>
>
>  
>

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002