[Samba] GROUPMAP data in LDAP?

[ww m-pubsyssamba]

Hi list,

If I have multiple Samba member servers in a domain can I store the groupmap data in LDAP? When I try this I get this error

# net groupmap add ntgroup=Everyone unixgroup=nobody
No rid or sid specified, choosing algorithmic mapping
adding entry for group nobody failed!


But this works correctly (creates account in LDAP server)

smbpasswd -a username password


the LDAP config in my smb.conf is as follows,


     security = ads
     encrypt passwords = yes
     idmap backend = ldap:ldap://bbcwwp-sun19.worldwide.bbc.co.uk/
     passdb backend = ldapsam:"ldap://bbcwwp-sun19.worldwide.bbc.co.uk ldap://bbcwwp_sun21.worldwide.bbc.co.uk"
     ldap suffix = dc=worldwide,dc=bbc,dc=co,dc=uk
     ldap user suffix = ou=People
     ldap group suffix = ou=Groups
     ldap machine suffix = ou=machines,ou=Samba
     ldap idmap suffix = ou=idmap,ou=Samba
     ldap admin dn = uid=sambaadmin,ou=Special Users,dc=worldwide,dc=bbc,dc=co,dc=uk
     ldap ssl = no


	any answers much appreciated,

		thanks Andy.