[Samba] New here ... with an NT Group problem

[Torsten E.]

Torsten E. schrieb am Mittwoch, 29. September 2004 00:22:

> Igor Belyi schrieb am Dienstag, 28. September 2004 21:16:
>
>> Torsten E. wrote:

Hello again,


[...]

>> Look into 'net groupmap list'. The right 'Domain Admins' should have
>> RID (the last number after '-') 512 and SID (all numbers before the
>> last '-') corresponding to your Domain SID ('net getlocalsid').
>>
>> Use 'net groupmap delete' or 'net gropumap modify' to fix the
>> problem.
>
> Ok, Thanks Igor!
> I guess the:
> S-1-5-21-1313674548-3619494541-1192360840-...
> are the wrong ones (Domain Admins, Domain Guests & Domain Users) ...

[...]

> I'll delete them tomorrow.

So, I just tried to delete those groups/SIDs, but it doesn't work ...:

pdc:/home/torsten # net groupmap list
System Operators (S-1-5-32-549) -> ntadmin
Domain Users (S-1-5-21-363742550-2379833043-2840705137-513) -> ntuser
Replicators (S-1-5-32-552) -> ntadmin
Guests (S-1-5-32-546) -> nogroup
NTUsers (S-1-5-21-363742550-2379833043-2840705137-1201) -> ntuser
Domain Users (S-1-5-21-1313674548-3619494541-1192360840-513) -> -1
Power Users (S-1-5-32-547) -> ntuser
Print Operators (S-1-5-32-550) -> ntadmin
Administrators (S-1-5-32-544) -> ntadmin
Account Operators (S-1-5-32-548) -> ntadmin
Domain Guests (S-1-5-21-1313674548-3619494541-1192360840-514) -> -1
Backup Operators (S-1-5-32-551) -> ntadmin
Users (S-1-5-32-545) -> ntuser
Domain Admins (S-1-5-21-1313674548-3619494541-1192360840-512) -> -1
Domain Admins (S-1-5-21-363742550-2379833043-2840705137-512) -> ntadmin
Domain Guests (S-1-5-21-363742550-2379833043-2840705137-514) -> nogroup
pdc:/home/torsten #

pdc:/home/torsten # net groupmap delete ntgroup="Domain Admin"
sid=S-1-5-21-1313674548-3619494541-1192360840-512
Sucessfully removed S-1-5-21-1313674548-3619494541-1192360840-512 from
the mapping db
pdc:/home/torsten # net groupmap delete
sid=S-1-5-21-1313674548-3619494541-1192360840-513
Sucessfully removed S-1-5-21-1313674548-3619494541-1192360840-513 from
the mapping db
pdc:/home/torsten # net groupmap delete
sid=S-1-5-21-1313674548-3619494541-1192360840-514
Sucessfully removed S-1-5-21-1313674548-3619494541-1192360840-514 from
the mapping db
pdc:/home/torsten #

pdc:/home/torsten # net groupmap list
sid=S-1-5-21-1313674548-3619494541-1192360840-512
Domain Admins (S-1-5-21-1313674548-3619494541-1192360840-512) -> -1
pdc:/home/torsten # net groupmap list
sid=S-1-5-21-1313674548-3619494541-1192360840-513
Domain Users (S-1-5-21-1313674548-3619494541-1192360840-513) -> -1
pdc:/home/torsten # net groupmap list
sid=S-1-5-21-1313674548-3619494541-1192360840-514
Domain Guests (S-1-5-21-1313674548-3619494541-1192360840-514) -> -1
pdc:/home/torsten #

Any idea why it does not work?

Thanks in advance
Torsten

>> Igor
>
> c y
> Torsten