[Samba] Re: Problem adding users to the PDC

[Igor Belyi]

Users (S-1-5-32-545) is a local group. Domain users should have Domain 
group from their domain as their primary group. I would recommend to 
change mapping by removing 'Users -> users' map and adding 'Domain Users 
-> users' one.

The problem can be also caused if you already have 'Domain Users -> 
users' and add 'Users -> users' since Samba mapps gid -> SID by finding 
the first SID -> gid mapping with the right gid and will fail if 'Users 
-> users' is the first map it encounters.

Hope it helps,
Igor

Anton K. wrote:
> I have problem adding users after I set up a goupmap. Before there was no
> problem.
> net groupmap ntgroup=Users unixgroup=users
> Users (S-1-5-32-545) -> users
> useradd pesho -g users
> pdbedit -a pesho
> new password:
> retype new password:
> tdb_update_sam: Failing to store a SAM_ACCOUNT for [pesho] without a 
> primary
> group RID
> Unable to add user! (does it already exist?)
> pesho of cource doesn´t exist
> pdbedit -L | grep pesho
> returns nothing.
> 
> I´m using two passwd backends:
>  passdb backend = tdbsam:/etc/samba/passdb.tdb \
>                   smbpasswd:/etc/samba/smbpasswd
> In this case I´m trying to add pesho to tdbsam,
> when I remove it and only smbpasswd was in the smb.conf
> I was able to add it sucessfully.
> I´m using  samba 3.0.7-2.FC1.
> Can somebody tell me what have I done wrong?
>