[Samba] Domain Admins

[Bradley W. Langhorst]

On Mon, 2002-10-07 at 17:38, Irving Carrion wrote:
> I've read man smbgroupedit many times, over and over and OVER, and have
> done step by step per the man page with no luck.  I thought maybe it
> would be easier for one to help if they saw what I was doing. So I
> posted a partial listing of group,passwd,smb.conf below.
> 
> Plz, plz, really need some help with this!
> 
> Thanks!
> IRV
> 
> 
> I have Samba Version 2.999+3.0.alpha from the debian unstable archives.
> 
> 
> //BEGIN /ETC/GROUP
> domainadmins:x:1001:administrator,user1,user2
> //END /ETC/GROUP
> 
> //BEGIN /ETC/PASSWD
> administrator:x:1218:1001:Administrator,,,:/home/administrator:/bin/bash
> 
> user1:x:1219:1001:User 1,,,:/home/user1:/bin/bash
> user2:x:1220:1001:User 2,,,:/home/user2:/bin/bash
> //END /ETC/PASSWD
> 
> HERE IS THE OUTPUT of  "smbgroupedit -vs | grep "Domain Admins""
> Domain Admins (S-1-5-21-2879687004-3117605197-2714178016-512) ->
> domainadmins
> 
> 
>
did you make your domain admins a domain group  with -td?
just run smbgroupedit -td to see the domain groups...


>         admin users = @domainadmins
have you tried without this line?


how are you assessing whether this is working or not?
i consider the mapping to work if i can specify 
one of my domain groups as a part of a local group and 
the rsop tool says that a member of that group has the appropriate
permissions...

i'm not using domain admins  - do you maybe need to add it the local
admins group?

brad