Re: [Samba] Samba PDC...need help granting domain admin access
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/04/2006 02:44 PM, Scott Mecham escreveu: #net groupmap list Domain Users (S-1-5-21-1294588444-3772336984-2656111346-513) - users Domain Guests (S-1-5-21-1294588444-3772336984-2656111346-514) - nobody Domain Admins (S-1-5-21-1294588444-3772336984-2656111346-512) - admin #Global parameters [global] [...] I didn't see any configuration problems related to what you describe earlier. Could you try to increase the loglevel and send the important part of the logs? Kind regards, - -- Felipe Augusto van de Wiel [EMAIL PROTECTED] Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFJRI9Cj65ZxU4gPQRAh7vAKDCdKHvU+H7ADHVflDVKl+e+QGRpgCgsOcF JgwjlOEUVYRj2C0JPkykl1g= =d7HQ -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba PDC...need help granting domain admin access
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/03/2006 06:37 PM, Scott Mecham escreveu: I have the latest version of Samba on Fedora Core 4. I need help adding users to the admin group so windows is not so crippled :-\ I have used the net groupmap add command to map them to unix group of adminwhich is mapped to Domain Admins for windows. The users are members of the unix admin group but they have no admin access when logging into the domain. Please, could you send the result of 'net groupmap list'? I also tried editing the smb.conf. I added admin users = @admin Still didn't work after re-logging on. And could you send your smb.conf with some log? Any help here with this? Let's try, but we need some more information. Kind regards, - -- Felipe Augusto van de Wiel [EMAIL PROTECTED] Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFI69WCj65ZxU4gPQRAgXXAJ9Wdj2cA7sS+jYGAA+6AQhE5NIpAwCfY+Cv yNKHdSX4xZ5OCBwrY0Lsjus= =xZHB -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba PDC...need help granting domain admin access
#net groupmap list Domain Users (S-1-5-21-1294588444-3772336984-2656111346-513) - users Domain Guests (S-1-5-21-1294588444-3772336984-2656111346-514) - nobody Domain Admins (S-1-5-21-1294588444-3772336984-2656111346-512) - admin #Global parameters [global] netbios name = NAME workgroup = thedomainname security = user encrypt passwords = Yes server string = SambaDC interfaces = eth0 socket address = 10.5.73.101 bind interfaces only = Yes passdb backend = tdbsam pam password change = Yes passwd program = /usr/bin/passwd %u passwd chat = *password* %nn *password* %nn *successfully* username map = /etc/samba/smbusers #unix password sync = Yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 log level = 3 syslog = 0 log file = /var/log/samba/%m max log size = 50 #smb ports = 139 admin users = @admin enable privileges = yes name resolve order = wins hosts bcasts time server = Yes #printcap name = CUPS #load printers = Yes #printer admin = @admin #show add printer wizard = Yes # add user script = /usr/sbin/useradd -m %u delete user script = /usr/sbin/userdel -r %u add group script = /usr/sbin/groupadd %g delete group script = /usr/sbin/groupdel %g add user to group script = /usr/sbin/usermod -G %g %u add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null %u shutdown script = /var/lib/samba/scripts/shutdown.sh abort shutdown script = /sbin/shutdown -c ### logon script = startup.bat logon drive = U: logon path= logon home= ## domain logons = yes local master = yes os level = 64 preferred master = yes domain master = yes wins support = yes dns proxy = no name resolve order = wins lmhosts host bcast utmp = Yes map acl inherit = Yes #printing = cups veto oplock files = /*.doc/*.xls/*.mdb/*.sxw/*.sdw/*.sdc/*.stw/ [IPC$] hosts allow = 0.0.0.0/0 path = /tmp [netlogon] path = /var/lib/samba/netlogon read only = no browseable = No [homes] comment = Home Directories hide dot files = Yes read only = No browseable = No Felipe Augusto van de Wiel wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/03/2006 06:37 PM, Scott Mecham escreveu: I have the latest version of Samba on Fedora Core 4. I need help adding users to the admin group so windows is not so crippled :-\ I have used the net groupmap add command to map them to unix group of adminwhich is mapped to Domain Admins for windows. The users are members of the unix admin group but they have no admin access when logging into the domain. Please, could you send the result of 'net groupmap list'? I also tried editing the smb.conf. I added admin users = @admin Still didn't work after re-logging on. And could you send your smb.conf with some log? Any help here with this? Let's try, but we need some more information. Kind regards, - -- Felipe Augusto van de Wiel [EMAIL PROTECTED] Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFI69WCj65ZxU4gPQRAgXXAJ9Wdj2cA7sS+jYGAA+6AQhE5NIpAwCfY+Cv yNKHdSX4xZ5OCBwrY0Lsjus= =xZHB -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba PDC...need help granting domain admin access
I have the latest version of Samba on Fedora Core 4. I need help adding users to the admin group so windows is not so crippled :-\ I have used the net groupmap add command to map them to unix group of adminwhich is mapped to Domain Admins for windows. The users are members of the unix admin group but they have no admin access when logging into the domain. I also tried editing the smb.conf. I added admin users = @admin Still didn't work after re-logging on. Any help here with this? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
