[Samba] Samba 3.0.0 ADS Member: How do I browse or connect as Domain Administrator

[Dietrich Streifert]

Hello List!

I successfully installed, configured and joined Samba 3.0.0 on Solaris
9 to Windows 2000 Active Directory.

In samba 2.2.7 I used to set a mapping from Administrator to root with
username map and then put a local password with "smbpasswd -a root".
After this Administrator could browse and connect to samba shares as
user root.

In samba 3.0.0 this does not work anymore. For some reason the
username map file is not read or the mapping is not done. log.smbd
shows the output as attached.

How is this done in samba 3.0.0 in general or especially with security
= ADS?

Any help would be great.

Thank you.

log.smbd
---------------------------------------------------------------
[2003/10/08 11:19:00, 0] smbd/server.c:main(747)
  smbd version 3.0.0 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2003
[2003/10/08 11:19:00, 1] smbd/sesssetup.c:reply_spnego_kerberos(218)
  Username Administrator is invalid on this system
[2003/10/08 11:19:00, 1] smbd/sesssetup.c:reply_spnego_kerberos(218)
  Username Administrator is invalid on this system
---------------------------------------------------------------



smb.conf:
---------------------------------------------------------------
# Samba config file created using SWAT
# from 192.168.0.2 (192.168.0.2)
# Date: 2003/10/08 10:28:36

# Global parameters
[global]
        unix charset = ISO-8859-1
        workgroup = EDELSTEIN
        realm = EDELSTEIN.DE
        security = ADS
        wins server = 192.168.0.23
        create mask = 0740
        directory mask = 0750
        username map = /opt/samba/private/username.map

[homes]
        comment = Homedirectory
        read only = No

[development]
        comment = Development
        path = /development
        read only = No
---------------------------------------------------------------

username.map:
---------------------------------------------------------------
root = Administrator
---------------------------------------------------------------

-- 
Best Regards,
 Dietrich Streifert                 mailto:dietrich.streifert at visionet.de