[Samba] net groupmap modify failes

[rruegner]

Hi,
i am failing to map ldap groups to system groups
i tried following
Type "net help <option>" to get more information on that option
Valid targets: choose one (none defaults to localhost)
        -S or --server=<server>         server name
        -I or --ipaddress=<ipaddr>      address of target server
        -w or --workgroup=<wg>          target workgroup or domain

Valid miscellaneous options are:
        -p or --port=<port>             connection port on target
        -W or --myworkgroup=<wg>        client workgroup
        -d or --debuglevel=<level>      debug level (0-10)
        -n or --myname=<name>           client name
        -U or --user=<name>             user name
        -s or --configfile=<path>       pathname of smb.conf file
        -l or --long                    Display full information
        -V or --version                 Print samba version information
        -P or --machine-pass            Authenticate as machine account
xppc:/etc/samba # net groupmap add rid=512 ntgroup="Domain Admins"
unixgroup=root
adding entry for group Domain Admins failed!
xppc:/etc/samba # net groupmap modify rid=512 ntgroup="Domain Admins"
unixgroup=root
Bad option: rid=512
xppc:/etc/samba # net groupmap modify
Usage: net groupmap modify {ntgroup=<string>|sid=<SID>} [comment=<string>]
[unixgroup=<string>] [type=<domain|local>]
xppc:/etc/samba # net groupmap modify
xppc:/etc/samba # net groupmap list
Domain Admins (S-1-5-21-316418144-728220878-2830442550-512) -> Domain Admins
Domain Users (S-1-5-21-316418144-728220878-2830442550-513) -> Domain Users
Domain Guests (S-1-5-21-316418144-728220878-2830442550-514) -> Domain Guests
Administrators (S-1-5-21-316418144-728220878-2830442550-544) ->
Administrators
users (S-1-5-21-316418144-728220878-2830442550-545) -> Users
Guests (S-1-5-21-316418144-728220878-2830442550-546) -> Guests
Power Users (S-1-5-21-316418144-728220878-2830442550-547) -> Power Users
Account Operators (S-1-5-21-316418144-728220878-2830442550-548) -> Account
Operators
Server Operators (S-1-5-21-316418144-728220878-2830442550-549) -> Server
Operators
Print Operators (S-1-5-21-316418144-728220878-2830442550-550) -> Print
Operators
Backup Operators (S-1-5-21-316418144-728220878-2830442550-551) -> Backup
Operators
Replicator (S-1-5-21-316418144-728220878-2830442550-552) -> Replicator
Domain Computers (S-1-5-21-316418144-728220878-2830442550-553) -> Domain
Computers
xppc:/etc/samba # net groupmap modify ntgroup="Domain
Admins|sid=S-1-5-21-316418144-728220878-2830442550-512" unixgroup=root
NT Group Domain Admins|sid=S-1-5-21-316418144-728220878-2830442550-512
doesn't exist in mapping DB
xppc:/etc/samba # net groupmap modify
sid=S-1-5-21-316418144-728220878-2830442550-512 unixgroup=root
[2004/02/18 02:44:40, 0]
passdb/pdb_ldap.c:ldapsam_update_group_mapping_entry(2015)
  ldapsam_update_group_mapping_entry: No group to modify!
Could not update group database

I see that i am a newbie with that stuff, after all this works with
smbpasswd backend
my problem is also if i want set permissions on a folder with the win client
with advanced button
i cant add another group....i have no log that give me some answers
is it not possible to give permissions to more than one group or change the
group,
ich my smbpasswd pdc this work
the win failure code says you dont have permissions
can someone enlight me ?
Best Regards