[Samba] conflicting domain portions are not supported for NETLOGON calls

Andrew Bartlett abartlet at samba.org
Fri Jul 25 03:02:01 GMT 2003

On Thu, 2003-07-24 at 02:44, George Farris wrote:
> I'm seeing this error in my log file under samba-3.0beta3.
> "The conflicting domain portions are not supported for NETLOGON calls."
> I have created a unix/samba user testuser and a unix group pwruser.
> The testuser's primary group is pwruser.
> Next I mapped the ntgroup to pwruser with:
> "net groupmap modify ntgroup="Power Users" unixgroup=pwruser"
> and net groupmap list shows:
> [root at owl samba]# net groupmap list
> System Operators (S-1-5-32-549) -> -1
> Domain Guests (S-1-5-21-1135672234-1853056381-2991119365-514) -> -1
> Replicators (S-1-5-32-552) -> -1
> Guests (S-1-5-32-546) -> -1
> Power Users (S-1-5-32-547) -> pwruser

You cannot do it this way - power users is determined on the
workstation, and the user can only be a member of groups in it's own
domain.  (not the 'special' groups)

Andrew Bartlett

Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20030725/3ac9442b/attachment.bin

More information about the samba mailing list