[Samba] create_builtin_administrators: Failed to create Administrators

[Frédéric SOSSON]

Hello,

I am running Samba 3.0.33-3.28.el5 configured like this:

[global]
        workgroup                  = mywrk
        realm                      = myrealm
        security                   = ads
        name resolve order         = lmhosts host bcast
        allow trusted domains      = no
        socket options             = TCP_NODELAY IPTOS_LOWDELAY
SO_RCVBUF=8576 SO_SNDBUF=8576
        template shell             = /bin/bash
        template homedir           = /home/%D/%U
        restrict anonymous         = 2
        use kerberos keytab        = yes

        winbind use default domain = yes
        winbind enum users         = no
        winbind enum groups        = no
        winbind nested groups      = yes
        winbind cache time         = 172800
        winbind refresh tickets    = yes
        winbind offline logon      = yes

        idmap domains              = mydomain
        idmap config mydomain:default    = yes
        idmap config mydomain:backend    = rid
        idmap config mydomain:base_rid   = 0
        idmap config mydomain:range      = 5000-10000000
        idmap config mydomain:readonly   = yes
        idmap uid                  = 5000-10000000
        idmap gid                  = 5000-10000000
        idmap negative cache time  = 5
        idmap cache time           = 172800

        printing                   = cups
        printcap name              = cups
        load printers              = yes
        printer admin              = root
        log level                  = 2

[printers]
        comment = All Printers
        path = /var/spool/samba
        guest ok = yes
        public = yes
        read only = yes
        printable = yes

[print$]
        comment = Printer Driver Download Area
        path = /etc/samba/drivers
        browseable = yes
        guest ok = yes
        read only = yes
        write list = fsosson, root

When I try to upload windows printer driver using the "Add a printer'
wizard, I connect with my domaine user I got this message "Operation
could not be completed.  Access denied".  Samba log file output:

[2010/07/28 11:54:58, 2] auth/auth_util.c:create_builtin_administrators(844)
  create_builtin_administrators: Failed to create Administrators
[2010/07/28 11:54:58, 2] auth/auth_util.c:create_local_nt_token(966)
  create_local_nt_token: Failed to create BUILTIN\Administrators group!
[2010/07/28 11:54:58, 2] auth/auth_util.c:create_builtin_users(810)
  create_builtin_users: Failed to create Users
[2010/07/28 11:54:58, 2] auth/auth_util.c:create_local_nt_token(993)
  create_local_nt_token: Failed to create BUILTIN\Users group!

Any idea?


Frédéric