Dear list, I have two problems managing groups from Win2kSP2 client using UserManager for domains.
My Linux user and groups are stored in OpenLDAP using pam_ldap+nss_ldap from Padl. Due to the fact that the groups using the ou=Group organizationalUnit, I have set in smb.conf the "ldap group suffix = ou=Group" (using ldapsam as passdb backend). So the Linux group and the sambaGroupMapping use the same LDAP-Entry. First problem: -------------- If I try to delete a group using UsrMgr, I get the message "Access Denied". Nevertheless the group and the groupmapping are deleted, because I delete the hole LDAP-Entry (including the groupmapping) in the "delete group script". Therefore, I checked the source and in rpc_server/srv_samr_nt.c I found in which order samba delete groups: 1. check, if linux group exists 2. call the "delete group script" 3. cehck, if linux group is gone 4. delete the groupmapping I think my problem is in step "4. delete the groupmapping". This, of couse, failed, because in the "delete group script" I delete the hole LDAP-Entry (the groupmapping, too). I don't know if I something misconfigured in samba or in LDAP, but if I change the order in rpc_server/srv_samr_nt.c (near line 3860) as follows: 1. check, if linux group exists 2. delete the groupmapping 3. call the "delete group script" 4. check, if linux group is gone this works without any error messages. But, I am not sure, whether this is the right way!?! Second problem: --------------- If I try to modify a group using UsrMgr, I get the message "The groupname could not be found" (this is a translation from german version). If I add and/or delete a user to/from a group, the scripts "delete user from group" and/or "add user to group" are sucessfully called. There is no error message, if I change the discription of a group´, too. Therefore, I checked the source and found this in passdb/pdb_ldap.c (near line 2007): if (mods == NULL) { DEBUG(4, ("........ return NT_STATUS_UNSUCCESSFULL; If I change the return value from NT_STATUS_UNSUCCESSFULL to NT_STATUS_OK, everything works fine without any error messages. But, same as above, I am not sure whether this is the right way!?! Any comments, notes, help etc. are welcome. Thank you for your time! Cheers, Bjoern -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba