[Samba] Power Users - Is it possible?

[Beast]

Friday, July 25, 2003, 4:39:56 PM, Felipe wrote:

> On Fri, 2003-07-25 at 11:13, Beast wrote:
>> > I'm seeing many people here in this list that do not complete understand
>> > the differences between a local group and a global (domain) group. I
>> > have posted a message trying to clarify on this :-)
>> 
>> >From  net groupmap list command, it did not say anything about local
>> and global group.
>> I think samba should print different msg to diferrentiate between
>> local and global group.

> If Samba is acting as a domain controller (PDC), then it will only
> mantain global groups. Local groups are only available on workstations
> and member servers.

This is incorrect.
This is my smb.conf (Its PDC) :

 [global]
   netbios name = LINJKT
   workgroup = DJKT
   server string = %L on Samba Server %v

   passdb backend = smbpasswd, guest

   os level = 64
   preferred master = yes
   domain master = yes
   local master = yes

   security = user
   encrypt passwords = yes

   domain logons = yes
   ....
   
This is output of net groupmap list:

System Operators (S-1-5-32-549) -> -1
Domain Users (S-1-5-21-682855339-941891451-1873685625-513) -> -1
Replicators (S-1-5-32-552) -> -1
Guests (S-1-5-32-546) -> -1
Domain Guests (S-1-5-21-682855339-941891451-1873685625-514) -> -1
Power Users (S-1-5-32-547) -> -1
Print Operators (S-1-5-32-550) -> -1
Administrators (S-1-5-32-544) -> -1
Account Operators (S-1-5-32-548) -> -1
Domain Admins (S-1-5-21-682855339-941891451-1873685625-512) -> -1
Backup Operators (S-1-5-32-551) -> -1
Users (S-1-5-32-545) -> -1

Even in NT 4.0 PDC, there's still local group by default.
The nice thing is in NT User manager for domain, it diferrentiate the
local and global group by icon.
Samba should also has this feature (if possible :))


--beast