[Samba] Domain Admins

Bradley W. Langhorst brad at langhorst.com
Mon Oct 7 21:54:01 GMT 2002

On Mon, 2002-10-07 at 17:38, Irving Carrion wrote:
> I've read man smbgroupedit many times, over and over and OVER, and have
> done step by step per the man page with no luck.  I thought maybe it
> would be easier for one to help if they saw what I was doing. So I
> posted a partial listing of group,passwd,smb.conf below.
> Plz, plz, really need some help with this!
> Thanks!
> I have Samba Version 2.999+3.0.alpha from the debian unstable archives.
> domainadmins:x:1001:administrator,user1,user2
> administrator:x:1218:1001:Administrator,,,:/home/administrator:/bin/bash
> user1:x:1219:1001:User 1,,,:/home/user1:/bin/bash
> user2:x:1220:1001:User 2,,,:/home/user2:/bin/bash
> HERE IS THE OUTPUT of  "smbgroupedit -vs | grep "Domain Admins""
> Domain Admins (S-1-5-21-2879687004-3117605197-2714178016-512) ->
> domainadmins
did you make your domain admins a domain group  with -td?
just run smbgroupedit -td to see the domain groups...

>         admin users = @domainadmins
have you tried without this line?

how are you assessing whether this is working or not?
i consider the mapping to work if i can specify 
one of my domain groups as a part of a local group and 
the rsop tool says that a member of that group has the appropriate

i'm not using domain admins  - do you maybe need to add it the local
admins group?


More information about the samba mailing list