[Samba] groupmap trouble

[Lorenzo Cerini]

hi,

i'm moving from nt4 to samba ( 3.0.7 on suse 9.2).

I'm able to join the domain, and roaming profiles work. 


I used net groupmap to map unix to nt group, this way:

System Operators (S-1-5-32-549) -> -1

Domain Guests (S-1-5-21-2839205766-3667556824-2828225164-514) -> nobody

Replicators (S-1-5-32-552) -> -1

Guests (S-1-5-32-546) -> ntguests

Power Users (S-1-5-32-547) -> pusers

Print Operators (S-1-5-32-550) -> -1

Administrators (S-1-5-32-544) -> ntadmins

Domain Users (S-1-5-21-2839205766-3667556824-2828225164-513) -> ntusers

Account Operators (S-1-5-32-548) -> -1

Backup Operators (S-1-5-32-551) -> -1

Users (S-1-5-32-545) -> ntusers

Domain Admins (S-1-5-21-2839205766-3667556824-2828225164-512) -> ntadmins

User lorenzo belongs to ntadmins (not as primary group). I'm able to make a pc join the domain using 
lorenzo as domain admins, but lorenzo doesn't work as administrator on the client.

i think something is mismatching in group mapping 


Any Idea?

L.