[Samba] Groupmapping problems in 3.0.20

Carsten Sander sander at csa-net.de
Wed Aug 24 16:42:22 GMT 2005


Hi all,

after updating my pdc from 3.0.14a to 3.0.20 the
groupmap function does not work properly.

net groupmap list:
returns the same groupmapping on both samba versions.

Domain Computers (S-1-5-21-xxx-yyy-zzz-515) -> nt
Domain Guests (S-1-5-21-xxx-yyy-zzz-514) -> nobody
Domain Admins (S-1-5-21-xxx-yyy-zzz-512) -> root
Print Operators (S-1-5-32-550) -> oper
cvs (S-1-5-21-xxx-yyy-zzz-1219) -> cvs
cad (S-1-5-21-xxx-yyy-zzz-1211) -> cad
www (S-1-5-21-xxx-yyy-zzz-1213) -> www
Domain Users (S-1-5-21-xxx-yyy-zzz-513) -> users
testgr (S-1-5-21-xxx-yyy-zzz-2011) -> testgr
...

On 3.0.20

net rpc group list:
returns the unix groupnames instead of the mapped groupnames

nt
nobody
root
oper
cvs
cad
www
users
testgr
...

net group /domain (cmd.exe on xp and w2k):
returns the unix groupnames instead of the mapped groupnames

usrmgr.exe:
returns the unix groupnames instead of the mapped groupnames
with following effect:
- Editing of groups root and users (Domain Admins and Domain
   Users) is not possible (Error: the groupname can not be found)
- Reassigning the primary group Domain Users in the group
   membership dialog is not possible, because the group is not
   shown

acl file dialog on windows (xp and w2k):
returns the unix groupnames instead of the mapped groupnames
with the following effect:
- Assigning rights to the groups root and users has no effect
- Maunally typing in "Domain Users" and "Domain Admins" assigns
   the rights properly.

My environment:
- Ldap master on RH8.0 (openldap 2.1.29)
- Ldap slave on FC3 (openldap 2.2.13)
- PDC on RH8.0 (kernel 2.4.29, samba 3.0.20 (rpmbuild from fedora
   src rpm from samba.org), nss_ldap-207)

I got the same results on a second system:
- PDC on FC4 (kernel 2.6.12-1.1398_FC4smp, samba 3.0.20 (build from
   source from samba.org), openldap-client 2.2.23, nss_ldap-234)

After downgrading to 3.0.14a, the groupmapping is ok.

Any ideas?

Regards
   Carsten

-- 
.



More information about the samba mailing list