[Samba] domain admins and Samba 3.0.2
geza at kzsdabas.sulinet.hu
Thu Mar 25 13:43:37 GMT 2004
-----BEGIN PGP SIGNED MESSAGE-----
Janet Dickson írta:
| I've been running Samba 2.x for years but decided to move up to 3.0.2.
| I've set up a new samba server with a workgroup NEWBIOSS and netbios
| name PARETO.
| Im having problems setting up my domain admins.
| I used
| 'net groupmap modify "Domain Admins" unixgroup=domadmin'
| my 'net groupmap list' shows :
| System Operators (S-1-5-32-549) -> -1
| Replicators (S-1-5-32-552) -> -1
| Guests (S-1-5-32-546) -> -1
| Domain Users (S-1-5-21-1375496003-1846269575-2512961765-513) -> -1
| Power Users (S-1-5-32-547) -> -1
| Print Operators (S-1-5-32-550) -> -1
| Administrators (S-1-5-32-544) -> -1
| Account Operators (S-1-5-32-548) -> -1
| Domain Admins (S-1-5-21-1375496003-1846269575-2512961765-512) -> domadmin
| Backup Operators (S-1-5-32-551) -> -1
| Domain Guests (S-1-5-21-1375496003-1846269575-2512961765-514) -> -1
| Users (S-1-5-32-545) -> -1
| net getlocalsid
| SID for domain PARETO is: S-1-5-21-1375496003-1846269575-2512961765
| ypcat group |grep domadmin
| user janet is in group 60
| On the PC (Win 2K) it says :
| You are logged in as NEWBIOSS\janet, which is not a member of the
| Administrators group
| But when I check under 'Local Users and Groups' Administrator
| properties, it includes
| NEWBIOSS\Domain Admins(S-1-5-21-1375496003-184...
| I've checked out the thread about domain admins in January, but cannot
| see where I'm going wrong. I've been running samba 2.2.5 with
| 'domain admin group = root @domadmin' in smb.conf for ages with no
| Can anyone help ?
| I have a huge level 3 debug if anyone can understand it.
You haven't mapped your Domain Users, and Domain Guests group, which
could confuse your Windows clients
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----
More information about the samba