Re: [Samba] Re: Group membership not meshing

2008-12-30 Thread wes
On Tue, Dec 30, 2008 at 1:33 PM, Chad wrote: > On Tue, Dec 30, 2008 at 11:13 AM, Chad wrote: > > Hello, > > > > I have a user who shows up as a member of the office_administration > > group when I run: > > getent group | grep office_administration > > > > However when I login as the user and run

[Samba] Re: Group membership not meshing

2008-12-30 Thread Chad
On Tue, Dec 30, 2008 at 11:13 AM, Chad wrote: > Hello, > > I have a user who shows up as a member of the office_administration > group when I run: > getent group | grep office_administration > > However when I login as the user and run: > groups > or > id > I don't see the office_administration gr

Re: [Samba] Re: Group membership

2004-10-18 Thread Gémes Géza
Tarjei Huse írta: Wow! I think this is the best post I've seen on any mailinglist -ever- ! A minor comment/question: 3. If you want the Domain Admins group to be able to manage your Samba servers you must ensure that this group, or its members, somehow maps to the user 'root' or the group 'roo

Re: [Samba] Re: Group membership

2004-10-18 Thread Tarjei Huse
Wow! I think this is the best post I've seen on any mailinglist -ever- ! A minor comment/question: > 3. If you want the Domain Admins group to be able to manage your Samba servers > you must ensure that this group, or its members, somehow maps to the user > 'root' or the group 'root' (GID=0, on

Re: [Samba] Re: Group membership

2004-10-17 Thread Gémes Géza
Hi, I've read it a few times, however for the special case I would like to implement: members of the adm group (mapped to Domain Admins, but that is not important for what I ask) act as root globaly, as such they can manipulate user and group databases (what I intend is to allow them is joining

Re: [Samba] Re: Group membership

2004-10-17 Thread John H Terpstra
Folks, Confusion on the subject of group mapping will continue until users learn to partition the problem into digestible chunks. Windows has an entirely different administrative challenge compared with UNIX. MS Windows separates the concept of administrative rights so that a local machine admi

Re: [Samba] Re: Group membership

2004-10-17 Thread Gémes Géza
Hi everybody, Ok, the logic goes like this... If you want to use root for Domain administration purposes it has to be in the Domain user database. If it's a Domain user its primary group should be a Domain group. All Domain groups in Samba are mappings from UNIX groups into SIDs. If mapping for a

[Samba] Re: Group membership

2004-10-16 Thread Igor Belyi
Ok, the logic goes like this... If you want to use root for Domain administration purposes it has to be in the Domain user database. If it's a Domain user its primary group should be a Domain group. All Domain groups in Samba are mappings from UNIX groups into SIDs. If mapping for a particular gid

[Samba] Re: Group membership

2004-10-16 Thread Igor Belyi
The trick is in you picking SID by yourself. :o) sambaPrimaryGroupSID: should always be either explicit mapping of gidNumber in the groupmap or implicit arithmetic mapping: (gidNumber * 2) + 'rid base' + 1. Your problem is that you have inconsistency in you root's setup. As a result its primary