Re: [Samba] Power Users - Is it possible?

2003-07-25 Thread Felipe Alfaro Solana
On Fri, 2003-07-25 at 00:41, George Farris wrote: Yes thanks, sorry to upset you:-) I think we understand that now. Must be frustrating to what a newbie eh:-) Kind of funny. I'm seeing many people here in this list that do not complete understand the differences between a local group and a

Re: [Samba] Power Users - Is it possible?

2003-07-25 Thread Felipe Alfaro Solana
On Fri, 2003-07-25 at 00:35, George Farris wrote: Thanks for that. It's nice to have this explained well. I have a couple of books on w2k but mostly it talks AD and is not applicable. I have it working now. On to group policies which from what I can tell must remain as NT style to have any

Re: [Samba] Power Users - Is it possible?

2003-07-25 Thread Beast
Friday, July 25, 2003, 3:52:53 PM, Felipe wrote: On Fri, 2003-07-25 at 00:41, George Farris wrote: Yes thanks, sorry to upset you:-) I think we understand that now. Must be frustrating to what a newbie eh:-) Kind of funny. I'm seeing many people here in this list that do not complete

Re: [Samba] Power Users - Is it possible?

2003-07-25 Thread Beast
Friday, July 25, 2003, 4:39:56 PM, Felipe wrote: On Fri, 2003-07-25 at 11:13, Beast wrote: I'm seeing many people here in this list that do not complete understand the differences between a local group and a global (domain) group. I have posted a message trying to clarify on this :-)

Re: [Samba] Power Users - Is it possible?

2003-07-25 Thread Felipe Alfaro Solana
On Fri, 2003-07-25 at 11:54, Beast wrote: If Samba is acting as a domain controller (PDC), then it will only mantain global groups. Local groups are only available on workstations and member servers. This is incorrect. This is my smb.conf (Its PDC) : Well, local groups do exist in

Re: [Samba] Power Users - Is it possible?

2003-07-25 Thread Beast
Friday, July 25, 2003, 5:09:31 PM, Felipe wrote: On Fri, 2003-07-25 at 11:54, Beast wrote: If Samba is acting as a domain controller (PDC), then it will only mantain global groups. Local groups are only available on workstations and member servers. This is incorrect. This is my

Re: [Samba] Power Users - Is it possible?

2003-07-25 Thread Felipe Alfaro Solana
On Fri, 2003-07-25 at 12:17, Beast wrote: Friday, July 25, 2003, 5:09:31 PM, Felipe wrote: On Fri, 2003-07-25 at 11:54, Beast wrote: If Samba is acting as a domain controller (PDC), then it will only mantain global groups. Local groups are only available on workstations and member

Re: [Samba] Power Users - Is it possible?

2003-07-25 Thread Jason C. Waters
to unmap it just do groupmap delete sid=sidofPowerUsers George Farris wrote: Yes thanks, sorry to upset you:-) I think we understand that now. Must be frustrating to what a newbie eh:-) Kind of funny. So how do I unmap it from a unix group? Do I have to delete the Power Users group and

Re: [Samba] Power Users - Is it possible?

2003-07-25 Thread George Farris
My solution was to create a Domain Power Users group with net group map and assign an domain sid to it. I just incremented the highest sid in the group list, for example: net group map shows: System Operators (S-1-5-32-549) - -1 Domain Guests (S-1-5-21-1135672234-1853056381-2991119365-514) - -1

Re: [Samba] Power Users - Is it possible?

2003-07-25 Thread Stéphane Purnelle
Hi, Imagine a network with 150 computers connected to a Samba PDC. I don't want to set each machine that a Domain Power Users group is a member of Local Power Users. Anyone can crarify the situation ? A PDC which cannot send a information that a user is a member of a Power Users group is not

[Samba] Power Users - Is it possible?

2003-07-24 Thread Jason C. Waters
Is it possible to have 2000 windows machines reconize Domain Users under the local Power Users group? Right now I'm using samba 3beta3. Do I need kerberos support compiled in? Thanks for your help Jason -- To unsubscribe from this list go to the following URL and read the instructions:

Re: [Samba] Power Users - Is it possible?

2003-07-24 Thread George Farris
I have also struggled with this problem. It seems one can map a domain group such as Domain Admins and have it take effect on the workstation but Power Users is, I think, a local group and it doesn't work even though one can map a unix group to it. So how can one add users to a Power User group

Re: [Samba] Power Users - Is it possible?

2003-07-24 Thread Felipe Alfaro Solana
On Thu, 2003-07-24 at 18:31, George Farris wrote: I have also struggled with this problem. It seems one can map a domain group such as Domain Admins and have it take effect on the workstation but Power Users is, I think, a local group and it doesn't work even though one can map a unix group

Re: [Samba] Power Users - Is it possible?

2003-07-24 Thread George Farris
$%#@^% I forgot to delete the profile. It works. Now I should be able to make a new Domain Power Users group with net groupmap add. How does one find a new sid or can I just increment the last number used like so: [EMAIL PROTECTED] profiles]# net groupmap list System Operators (S-1-5-32-549) -

Re: [Samba] Power Users - Is it possible?

2003-07-24 Thread Jason C. Waters
net groupmap modify ntgroup=Power Users unixgroup=pwrusers something like that! George Farris wrote: $%#@^% I forgot to delete the profile. It works. Now I should be able to make a new Domain Power Users group with net groupmap add. How does one find a new sid or can I just increment the

Re: [Samba] Power Users - Is it possible?

2003-07-24 Thread George Farris
Yes I can do that but how do I remove pwrusers? I want to set ntgroup Power Users back to -1. On Thu, 2003-07-24 at 14:06, Jason C. Waters wrote: net groupmap modify ntgroup=Power Users unixgroup=pwrusers something like that! George Farris wrote: $%#@^% I forgot to delete the profile.

Re: [Samba] Power Users - Is it possible?

2003-07-24 Thread George Farris
Yes thanks, sorry to upset you:-) I think we understand that now. Must be frustrating to what a newbie eh:-) Kind of funny. So how do I unmap it from a unix group? Do I have to delete the Power Users group and re-create it? On Thu, 2003-07-24 at 15:32, Felipe Alfaro Solana wrote: On Thu,

Re: [Samba] Power Users - Is it possible?

2003-07-24 Thread John H Terpstra
On Thu, 24 Jul 2003, George Farris wrote: Yes thanks, sorry to upset you:-) I think we understand that now. Must be frustrating to what a newbie eh:-) Kind of funny. So how do I unmap it from a unix group? Do I have to delete the Power Users group and re-create it? net groupmap modify