[Samba] New here ... with an NT Group problem

[Torsten E.]

Igor Belyi schrieb am Dienstag, 28. September 2004 21:16:

> Torsten E. wrote:
>> Now my questions are:
>> - how to find out which Domain Admins group is the right one? How
>> can I see their IDs?
>> - where are those groups listed/managed? NTUsers is an manually added
>> group, and so its listed in /etc/group, but I didn't find the
>> MS-style groups ...
>
> Look into 'net groupmap list'. The right 'Domain Admins' should have
> RID (the last number after '-') 512 and SID (all numbers before the
> last '-') corresponding to your Domain SID ('net getlocalsid').
>
> Use 'net groupmap delete' or 'net gropumap modify' to fix the problem.

Ok, Thanks Igor!
I guess the:
S-1-5-21-1313674548-3619494541-1192360840-...
are the wrong ones (Domain Admins, Domain Guests & Domain Users) ...
pds:/home/torsten # net groupmap list
System Operators (S-1-5-32-549) -> ntadmin
Domain Users (S-1-5-21-363742550-2379833043-2840705137-513) -> ntuser
Replicators (S-1-5-32-552) -> ntadmin
Guests (S-1-5-32-546) -> nogroup
NTUsers (S-1-5-21-363742550-2379833043-2840705137-1201) -> ntuser
Domain Users (S-1-5-21-1313674548-3619494541-1192360840-513) -> -1
Power Users (S-1-5-32-547) -> ntuser
Print Operators (S-1-5-32-550) -> ntadmin
Administrators (S-1-5-32-544) -> ntadmin
Account Operators (S-1-5-32-548) -> ntadmin
Domain Guests (S-1-5-21-1313674548-3619494541-1192360840-514) -> -1
Backup Operators (S-1-5-32-551) -> ntadmin
Users (S-1-5-32-545) -> ntuser
Domain Admins (S-1-5-21-1313674548-3619494541-1192360840-512) -> ntadmin
Domain Admins (S-1-5-21-363742550-2379833043-2840705137-512) -> ntadmin
Domain Guests (S-1-5-21-363742550-2379833043-2840705137-514) -> nogroup
pdc:/home/torsten #

I'll delete them tomorrow.

> Igor

c y
Torsten