[Samba] domain admins and Samba 3.0.2

Janet Dickson janet at bioss.sari.ac.uk
Thu Mar 25 12:58:57 GMT 2004


I've been running Samba 2.x for years but decided to move up to 3.0.2. I've set 
up a new samba server with a workgroup NEWBIOSS and netbios name PARETO.
Im having problems setting up my domain admins.
I used
'net groupmap modify "Domain Admins" unixgroup=domadmin'

my 'net groupmap list' shows :
System Operators (S-1-5-32-549) -> -1
Replicators (S-1-5-32-552) -> -1
Guests (S-1-5-32-546) -> -1
Domain Users (S-1-5-21-1375496003-1846269575-2512961765-513) -> -1
Power Users (S-1-5-32-547) -> -1
Print Operators (S-1-5-32-550) -> -1
Administrators (S-1-5-32-544) -> -1
Account Operators (S-1-5-32-548) -> -1
Domain Admins (S-1-5-21-1375496003-1846269575-2512961765-512) -> domadmin
Backup Operators (S-1-5-32-551) -> -1
Domain Guests (S-1-5-21-1375496003-1846269575-2512961765-514) -> -1
Users (S-1-5-32-545) -> -1

net getlocalsid
SID for domain PARETO is: S-1-5-21-1375496003-1846269575-2512961765

ypcat group |grep domadmin

user janet is in group 60

On the PC (Win 2K) it says :
You are logged in as NEWBIOSS\janet, which is not a member of the Administrators 

But when I check under 'Local Users and Groups' Administrator properties, it 
NEWBIOSS\Domain Admins(S-1-5-21-1375496003-184...

I've checked out the thread about domain admins in January, but cannot see where 
I'm going wrong. I've been running samba 2.2.5 with
'domain admin group = root @domadmin' in smb.conf for ages with no problems

Can anyone help ?

I have a huge level 3 debug if anyone can understand it.


Janet Dickson                        | http://www.bioss.ac.uk/~janet
Biomathematics & Statistics Scotland | email: janet at bioss.ac.uk
The King's Buildings, Mayfield Rd    | Telephone: +44 (0) 131 650 4888
Edinburgh EH9 3JZ, Scotland, UK.     | Fax: +44 (0) 131 650 4901

More information about the samba mailing list