[Samba] groupmap trouble

Lorenzo Cerini lorenzo at info-era.com
Fri Jan 14 12:22:09 GMT 2005


i'm moving from nt4 to samba ( 3.0.7 on suse 9.2).

I'm able to join the domain, and roaming profiles work. 

I used net groupmap to map unix to nt group, this way:

System Operators (S-1-5-32-549) -> -1

Domain Guests (S-1-5-21-2839205766-3667556824-2828225164-514) -> nobody

Replicators (S-1-5-32-552) -> -1

Guests (S-1-5-32-546) -> ntguests

Power Users (S-1-5-32-547) -> pusers

Print Operators (S-1-5-32-550) -> -1

Administrators (S-1-5-32-544) -> ntadmins

Domain Users (S-1-5-21-2839205766-3667556824-2828225164-513) -> ntusers

Account Operators (S-1-5-32-548) -> -1

Backup Operators (S-1-5-32-551) -> -1

Users (S-1-5-32-545) -> ntusers

Domain Admins (S-1-5-21-2839205766-3667556824-2828225164-512) -> ntadmins

User lorenzo belongs to ntadmins (not as primary group). I'm able to make a pc join the domain using 
lorenzo as domain admins, but lorenzo doesn't work as administrator on the client.

i think something is mismatching in group mapping 

Any Idea?


More information about the samba mailing list