[Samba] uncovering groupmap problems

Andrew Gaffney agaffney at skylineaero.com
Mon Dec 22 03:34:02 GMT 2003


Craig White wrote:
> On Sun, 2003-12-21 at 20:14, Andrew Gaffney wrote:
> 
>>Craig White wrote:
>>
>>>Should I delete them first?
>>>
>>>net groupmap list
>>>Domain Admins (S-1-5-21-3186189368-1246494298-1334198317-512) -> Domain
>>>Admins #NOTE - listed only one for clarity#
>>>
>>># net groupmap modify sid=S-1-5-21-3186189368-1246494298-1334198317-512
>>>unixgroup=root type=domain
>>>[2003/12/21 20:05:22, 0]
>>>passdb/pdb_ldap.c:ldapsam_update_group_mapping_entry(1954)
>>>  ldapsam_update_group_mapping_entry: No group to modify!
>>>Could not update group database
>>
>>Have you tried using 'ntgroup' instead of 'sid' such as 'net groupmap modify 
>>ntgroup="Domain Admins" unixgroup=root type=domain'?
> 
> ----
> yeah - sorry, sloppy with copy & paste from terminal ;-) tested
> again...taken from command line and not shell script...
> 
> net groupmap modify sid=S-1-5-21-3186189368-1246494298-1334198317-512
> ntgroup="Domain Admins" unixgroup=root type=domain
> [2003/12/21 20:23:06, 0]
> passdb/pdb_ldap.c:ldapsam_update_group_mapping_entry(1954)
>   ldapsam_update_group_mapping_entry: No group to modify!
> Could not update group database

Try it without the 'sid' parameter completely.

-- 
Andrew Gaffney



More information about the samba mailing list