[Samba] Power Users group mapping doesn't work

Manuel Graumann mgraumann at gc-heat.de
Fri Nov 17 07:07:30 GMT 2006

Hi there!

I'm lost. After reading many pages about this - which all seem to say the
same - I still don't get it to work.

Samba 3.0.22-13.18 64bit
openLDAP 2.3.19-18.10

# net groupmap list
Domain Admins (S-1-5-21-3842594120-1922355106-3159979546-512) -> Domain
Domain Users (S-1-5-21-3842594120-1922355106-3159979546-513) -> Domain Users
Domain Guests (S-1-5-21-3842594120-1922355106-3159979546-514) -> Domain
Domain Computers (S-1-5-21-3842594120-1922355106-3159979546-515) -> Domain
Account Operators (S-1-5-32-548) -> Account Operators
Backup Operators (S-1-5-32-551) -> Backup Operators
Replicators (S-1-5-32-552) -> Replicators
Web Admins (S-1-5-21-3842594120-1922355106-3159979546-3005) -> Web Admins
Print Operators (S-1-5-21-3842594120-1922355106-3159979546-3009) -> Print
Einkauf (S-1-5-21-3842594120-1922355106-3159979546-3011) -> Einkauf
Hauptbenutzer (S-1-5-21-3842594120-1922355106-3159979546-547) -> Power Users

The LDAP group 'Power Users' shall be mapped to the Windows XP 'Power Users'
Group. As I'm using a german Windows version, I tried to name the group
'Hauptbenutzer' which doesn't work as well as naming it 'Power Users'.

What I expect how this schould work: I add a User to my domain-group 'Power
Users' and they are automatically added to the local 'Power Users' group on
the workstation. This doesn't work.

Yes I could add the domain group manually on each workstation to the 'Power
Users' group but this isn't automatic enough ;)

Any suggestions?



More information about the samba mailing list