[Samba] Re: Groupmapping doesn't work

[Igor Belyi]

What 'getent group domadm' returns you? I suspect that it does not have 
tilo as a member. If you have the same posixGroup defined both in 
/etc/group and in LDAP and what to have definition (and member list) to 
be taken from LDAP instead of local file you need to list 'ldap' before 
'files' in your group description in /etc/nsswitch.conf:
group: ldap files

Hope it helps,
Igor

Tilo Lutz wrote:
> Hi
> 
> I got a problem with groupmapping. It doesn't work correct:
> 
> Wilma2:/home/root # net groupmap list | grep 512
> Domain Admins (S-1-5-21-3371203057-3264423045-2392767973-512) -> domadm
> 
> ldapsearch -x cn=domadm:
> # domadm, groups, wms-hn.de
> dn: cn=domadm,ou=groups,dc=my-domain
> objectClass: posixGroup
> objectClass: sambaGroupMapping
> cn: domadm
> gidNumber: 65669
> memberUid: tilo
> sambaSID: S-1-5-21-3371203057-3264423045-2392767973-512
> sambaGroupType: 2
> displayName: Domain Admins
> description: Domain Admins
> 
> 
> The problem is "tilo" doesn't have any administrator rights.
> 
> Any idea whats wrong? I use samba 3.0.7
> 
> Cheers Tilo
>