[Samba] problem with group mapping

[Fermín Galán]

Hello everybody.

I'm getting the following warning message in smbd logs:

[2003/11/25 09:40:24, 0] rpc_server/srv_util.c:get_domain_user_groups(371)
  get_domain_user_groups: primary gid of user [testuser] is not a Domain
group !
  get_domain_user_groups: You should fix it, NT doesn't like that

I have read in the archives that a solution to this problem is performing a
group mapping through net groupmap, as follows:

net groupmap modify ntgroup="Domain Users" UNIXgroup=users

where 'users' is the gid of testuser. 

I have already done this, but I doesn't solves the problem.

Somebody knows what could be the cause and the solution? Any help is really
welcome.

Configuration details:

Samba version is 3.0.0, compiled with default options (./configure && make),
running as PDC.

smb.conf:

[global]
        workgroup = VNUML
        passdb backend = tdbsam
        security = user
        encrypt passwords = yes

        # PDC related configuration
        os level = 64
        domain master = yes
        local master = yes
        preferred master = yes
        domain logons = yes

        # Home accounts
        logon home = \\%L\%U
        logon drive = H:

        # Profiles
        logon path = \\server2\%U

        add machine script = /usr/sbin/useradd -g machines -c Machine -d
/dev/null -s /bin/false %u

[netlogon]
        path = /netlogon
        writable = no
        browsable = no
        guest ok = yes

[tmp]
        path="/tmp"
        comment = temporal files

[homes]
        guest ok = no
        read only = no


Group mapping:

server1:~# net groupmap list
System Operators (S-1-5-32-549) -> -1
Replicators (S-1-5-32-552) -> -1
Guests (S-1-5-32-546) -> -1
Domain Admins (S-1-5-21-3581523360-593265997-265186742-512) -> -1
Power Users (S-1-5-32-547) -> -1
Domain Users (S-1-5-21-3581523360-593265997-265186742-513) -> users
Print Operators (S-1-5-32-550) -> -1
Administrators (S-1-5-32-544) -> -1
Account Operators (S-1-5-32-548) -> -1
Domain Guests (S-1-5-21-3581523360-593265997-265186742-514) -> -1
Backup Operators (S-1-5-32-551) -> -1
Users (S-1-5-32-545) -> -1

Testuser account info:

server1:~# cat /etc/passwd | grep testuser
testuser:*:1000:100:testing:/home/testuser:/bin/false
server1:~# cat /etc/group | grep users
users:*:100:testuser

Thanks in advance!

-------
Fermín