[Samba] uncovering groupmap problems

Craig White craigwhite at azapple.com
Mon Dec 22 03:59:26 GMT 2003


On Sun, 2003-12-21 at 20:34, Andrew Gaffney wrote:
> Craig White wrote:
> > On Sun, 2003-12-21 at 20:14, Andrew Gaffney wrote:
> > 
> >>Craig White wrote:
> >>
> >>>Should I delete them first?
> >>>
> >>>net groupmap list
> >>>Domain Admins (S-1-5-21-3186189368-1246494298-1334198317-512) -> Domain
> >>>Admins #NOTE - listed only one for clarity#
> >>>
> >>># net groupmap modify sid=S-1-5-21-3186189368-1246494298-1334198317-512
> >>>unixgroup=root type=domain
> >>>[2003/12/21 20:05:22, 0]
> >>>passdb/pdb_ldap.c:ldapsam_update_group_mapping_entry(1954)
> >>>  ldapsam_update_group_mapping_entry: No group to modify!
> >>>Could not update group database
> >>
> >>Have you tried using 'ntgroup' instead of 'sid' such as 'net groupmap modify 
> >>ntgroup="Domain Admins" unixgroup=root type=domain'?
> > 
> > ----
> > yeah - sorry, sloppy with copy & paste from terminal ;-) tested
> > again...taken from command line and not shell script...
> > 
> > net groupmap modify sid=S-1-5-21-3186189368-1246494298-1334198317-512
> > ntgroup="Domain Admins" unixgroup=root type=domain
> > [2003/12/21 20:23:06, 0]
> > passdb/pdb_ldap.c:ldapsam_update_group_mapping_entry(1954)
> >   ldapsam_update_group_mapping_entry: No group to modify!
> > Could not update group database
> 
> Try it without the 'sid' parameter completely.
---
I did - again and again...

# net groupmap modify ntgroup="Domain Admins" unixgroup=root type=domain
[2003/12/21 20:24:36, 0]
passdb/pdb_ldap.c:ldapsam_update_group_mapping_entry(1954)
  ldapsam_update_group_mapping_entry: No group to modify!
Could not update group database

the song remains the same (to quote Zeppelin)

Craig



More information about the samba mailing list