[Samba] net groupmap woes - solved + root in domain admins solved

[Brian Krusic]

Hi all,

So I read in the Samba docs where in order to map a unix group with a  
windows group (when using LDAP backend), that unixgroup must exist in  
the LDAP db even though it already exists in /etc/group.

So I added the unix group of root to my LDAP db via ldapadd and using  
an ldif file with the desired values.

I removed the group mapping via net groupmap delete "Domain Admins" as  
net groupmap modify didn't work and added the mapping of Domain Admins  
to root and all is well.

I had to unjoin/rejoin the domain so that the root login worked as an  
Administrator on the XP box but all is well.

- Brian

On May 27, 2009, at 7:06 PM, Brian Krusic wrote:

> Hi all,
>
> I've scoured the net looking for a solution but to no avail.
>
> net groupmap list returns
>
> Domain Admins (S-############........) -> Domain Admins
>
> I would rather map Domain Admins to my root unix group.
>
> net groupmap modify ntgroup="Domain Admins" unixgroupreturns type=d
>
> returns an error;
>
> Could not update group database.
>
> If I delete via;
>
> net groupmap delete "Domain Admins" and then
>
> net groupmap add ntgroup="Domain Admins unixgroup=root rid=512 type=d
>
> I get;
>
> adding entry for group Domain Admins failed!
>
> Any and I mean any feedback is greatly appreciated.
>
>
> - Brian
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba