[Samba] Re: USRMGR, groups, and ldap

James Money jmoney at nccu.edu
Fri Jul 21 18:01:43 GMT 2006

Yes, I see all the ldap groups from the machine. Matter of fact, I have
several machines already using ldap for authentication on the unix side.


>>> "Jamrock" <news_jamrock at yahoo.com> 07/21/06 9:57 AM >>>
"James Money" <jmoney at nccu.edu> wrote in message
news:44BFA3B80200006700010B63 at artemis.nccu.edu...
> I currently have samba version 3.0.23 installed using ldap as the
> backend. I am experiencing the same problems as Holger Wesser
> in his posting "USRMGR.exe not working properly". However, it appears
> that the fix of creating the group mappings does not work. They appear
> to be mapped correctly on my setup. My net groupmap list is:
> Domain Admins (S-1-5-21-1882045844-2771900506-1057560041-512) ->
> Admins
> Domain Users (S-1-5-21-1882045844-2771900506-1057560041-513) -> Domain
> Users
> Domain Guests (S-1-5-21-1882045844-2771900506-1057560041-514) ->
> Guests
> Domain Computers (S-1-5-21-1882045844-2771900506-1057560041-515) ->
> Domain Computers
> Administrators (S-1-5-32-544) -> Administrators
> Account Operators (S-1-5-32-548) -> Account Operators
> Print Operators (S-1-5-32-550) -> Print Operators
> Backup Operators (S-1-5-32-551) -> Backup Operators
> Replicators (S-1-5-32-552) -> Replicators
> However, there are no groups listed in usrmgr.exe or any of the dialog
> boxes for adding users/groups in XP. The users are listed correctly in
> usrmgr.exe but with none of the group memberships.
> In addition, net rpc group members "Administrators" reports:
>     Couldn't list alias members
> I was hoping for some direction on how to diagnose and correct the
> problem.
> -James

Can the workstations read the group information from LDAP?  This issue
sometimes caused by the incorrect configuration of nss_ldap.

Make sure you can see the ldap group entries when you type

getent group

To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

More information about the samba mailing list