[Samba] adding machines to the domain with Samba 3.0.0
Andrew Gaffney
agaffney at technaut.darktalker.net
Fri Dec 12 01:51:56 GMT 2003
Is there something special I need to do to let root add computers to the domain in 3.0?
When I try to add the workstation I get an error about 'user not found' even though I can
logon to a workstation joined to the domain as 'root'. I was able to add computers to the
domain with 2.2.8 with an 'add user command' entry and 'domain admin group = root' in my
smb.conf I have root in the 'Domain Admins' group:
skyline samba # net groupmap list
System Operators (S-1-5-32-549) -> -1
Dispatch (S-1-5-21-124999916-2847287174-2328787173-1831) -> dispatch
Replicators (S-1-5-32-552) -> -1
Guests (S-1-5-32-546) -> -1
Mechanics (S-1-5-21-124999916-2847287174-2328787173-1827) -> mech
Instructors (S-1-5-21-124999916-2847287174-2328787173-1837) -> instructors
Accounting (S-1-5-21-124999916-2847287174-2328787173-1829) -> accounting
Domain Admins (S-1-5-21-124999916-2847287174-2328787173-512) -> domainadmins
Domain Guests (S-1-5-21-124999916-2847287174-2328787173-514) -> domainguests
Domain Users (S-1-5-21-124999916-2847287174-2328787173-513) -> domainusers
Power Users (S-1-5-32-547) -> -1
Print Operators (S-1-5-32-550) -> -1
Administrators (S-1-5-32-544) -> domainadmins
Account Operators (S-1-5-32-548) -> -1
Backup Operators (S-1-5-32-551) -> -1
Users (S-1-5-32-545) -> -1
skyline samba # cat /etc/group | grep domainadmins
domainadmins:x:412:root
I tried to use 'User Manager for Domains' to grant 'Domain Admins' the right to 'Add
workstations to the domain' but I got an error when I hit OK that said something about not
being able to take away local logon right to the local Administrators group. I tried
mapping the existing 'Administrators' group to the unix group 'domainadmins' and then
specifically granting the 'Administrators' group the right to Logon Locally, but I still
get the error. Can anyone help?
--
Andrew Gaffney
More information about the samba
mailing list