I agree, it felt messy. By the time I got here I was just trying to pile more junk on top to reach the sky. :)

Just to be clear, the "domain admin group" directive expects samba users, not unix users and not unix groups correct?

I've found that the "Using Samba" book published by O'Reilly seems to be a bit light in documentation when it comes to using Samba as a PDC.

http://www.oreilly.com/catalog/samba/chapter/book/

Do you have a book you recommend or another source? I've also found the samba.org docs a little light when looking for PDC issues.

Noel Kelly wrote:

This sounds awfully messy Bert. All those mappings might not be necessary.

I setup a Samba PDC the other week for a customer and we simply used the
'domain admin group =' parameter like this:

domain admin group = admin nkelly root and other samba users

This means when I (nkelly) log in on a workstation I have complete control
over it.

HTH
Noel




-----Original Message-----
From: Bert Rapp [mailto:bert@;rappsonline.com]
Sent: 05 November 2002 19:13
To: Samba List
Subject: Re: [Samba] Trouble with groups


Have I wandered into uncharted territory? They has to be someone out there that can point me in the right direction. Please help me. :)

Bert Rapp wrote:


I'm having trouble getting myself in to the administrators group. I'm using samba as a domain controller. I have a samba account called administrator. I have these settings in my smb.conf::

domain group map = /etc/samba/groups.mapping
domain user map = /etc/samba/domainuser.mapping
local group map = /etc/samba/localgroup.mapping


This is in my domainuser.mapping to alias the administrator samba account to the linux root account:
root = \\NORTHTRAILRV\\Administrator

This is in my groups.mapping to alias admins to the Administrators groups
admins = Administrators

This is the group listing in /etc/group:
admins:x:200:root

And for fun I have a local group mapping like this:
admins = BUILTIN\Administrators

For some reason though, when I log on to the domain as administrator, I still do not have permission to change the time or anything else.

Does anyone have any suggestions?



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Reply via email to