[Samba] Re: USRMGR, groups, and ldap

Jamrock news_jamrock at yahoo.com
Fri Jul 21 13:57:37 GMT 2006

"James Money" <jmoney at nccu.edu> wrote in message
news:44BFA3B80200006700010B63 at artemis.nccu.edu...
> I currently have samba version 3.0.23 installed using ldap as the
> backend. I am experiencing the same problems as Holger Wesser mentioned
> in his posting "USRMGR.exe not working properly". However, it appears
> that the fix of creating the group mappings does not work. They appear
> to be mapped correctly on my setup. My net groupmap list is:
> Domain Admins (S-1-5-21-1882045844-2771900506-1057560041-512) -> Domain
> Admins
> Domain Users (S-1-5-21-1882045844-2771900506-1057560041-513) -> Domain
> Users
> Domain Guests (S-1-5-21-1882045844-2771900506-1057560041-514) -> Domain
> Guests
> Domain Computers (S-1-5-21-1882045844-2771900506-1057560041-515) ->
> Domain Computers
> Administrators (S-1-5-32-544) -> Administrators
> Account Operators (S-1-5-32-548) -> Account Operators
> Print Operators (S-1-5-32-550) -> Print Operators
> Backup Operators (S-1-5-32-551) -> Backup Operators
> Replicators (S-1-5-32-552) -> Replicators
> However, there are no groups listed in usrmgr.exe or any of the dialog
> boxes for adding users/groups in XP. The users are listed correctly in
> usrmgr.exe but with none of the group memberships.
> In addition, net rpc group members "Administrators" reports:
>     Couldn't list alias members
> I was hoping for some direction on how to diagnose and correct the
> problem.
> -James

Can the workstations read the group information from LDAP?  This issue is
sometimes caused by the incorrect configuration of nss_ldap.

Make sure you can see the ldap group entries when you type

getent group

More information about the samba mailing list