[Samba] Why would "net rpc rights grant" fail ?

[Rowland Penny]

On 14/04/14 16:42, Koenraad Lelong wrote:
> op 14-04-14 17:25, Rowland Penny schreef:
>
>>
>> After a bit more thinking, did you have a unix group called
>> 'Administrators' ? and was its gid 65533 ?
>> I am only asking this because sysvol should belong to 'root:3000000'
>> 3000000 is the xidNumber for SID 'S-1-5-32-544', which is the
>> Administrators group in AD.
>>
>> Rowland
>
> Neither old or new samba-machine has an Adminstrators group. The new 
> samba-box does have an administator group (no *s*), that seems an 
> Ubuntu thing. On the old samba-box there is a group-number of 65533 : 
> nobody. On the new box there is no group-number of 65533.
>
> Koenraad
>
Hmm, I wonder if the classicupgrade got confused here ? you should have 
'CN=Administrators,CN=Builtin,DC=example,DC=com'

Any chance of you posting a sanitized version of the administrator group 
from your AD dump ?

Rowland