[Samba] conflicting domain portions are not supported for NETLOGON calls

[Andrew Bartlett]

On Thu, 2003-07-24 at 02:44, George Farris wrote:
> I'm seeing this error in my log file under samba-3.0beta3.
> "The conflicting domain portions are not supported for NETLOGON calls."
> 
> I have created a unix/samba user testuser and a unix group pwruser.
> The testuser's primary group is pwruser.
> 
> Next I mapped the ntgroup to pwruser with:
> "net groupmap modify ntgroup="Power Users" unixgroup=pwruser"
> 
> and net groupmap list shows:
> [root at owl samba]# net groupmap list
> System Operators (S-1-5-32-549) -> -1
> Domain Guests (S-1-5-21-1135672234-1853056381-2991119365-514) -> -1
> Replicators (S-1-5-32-552) -> -1
> Guests (S-1-5-32-546) -> -1
> Power Users (S-1-5-32-547) -> pwruser

You cannot do it this way - power users is determined on the
workstation, and the user can only be a member of groups in it's own
domain.  (not the 'special' groups)


Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20030725/3ac9442b/attachment.bin