Re: [Samba] Impossible to change Primary group
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Fabio Muzzi wrote: Hello drweb, Saturday, November 25, 2006, 4:32:17 PM, you wrote: d By command: d pdbedit -r gad -G 514 -d0 d I cann't change primary group. I was looking through the list archives and found your post. I have the same issue. Any solutions yet? Running Samba 3.0.23d with tdbsam The primary group is based on the real Unix primary group. jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.2 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFvfuxIR7qMdg1EfYRAhnyAKDOXkntKoKzhbTnOaX7r0nXOvYB/gCfb2uw /b156fqoB9cl3zQeXORCyos= =iqB6 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Impossible to change Primary group
Hello Gerald, Monday, January 29, 2007, 2:50:54 PM, you wrote: d pdbedit -r gad -G 514 -d0 d I cann't change primary group. [...] Running Samba 3.0.23d with tdbsam GJC The primary group is based on the real Unix primary group. Ah, ok... so now it's impossible by design to change the primary group using pdbedit, right? Which leads to the next question: is it a good idea (from the windows clients point of view) to have the administrator user belong to domain users as the primary group and domain admins as a secondary group, or is it better to change the unix group of the adiministrator user to make it have domain admins as the primary group? -- Fabio Kurgan Muzzi -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Impossible to change Primary group
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Fabio Muzzi wrote: Hello Gerald, Monday, January 29, 2007, 2:50:54 PM, you wrote: d pdbedit -r gad -G 514 -d0 d I cann't change primary group. [...] Running Samba 3.0.23d with tdbsam GJC The primary group is based on the real Unix primary group. Ah, ok... so now it's impossible by design to change the primary group using pdbedit, right? Yes. This prevents the primary group reported to Windows clients form diverging from the Unix group membership. Which leads to the next question: is it a good idea (from the windows clients point of view) to have the administrator user belong to domain users as the primary group and domain admins as a secondary group, or is it better to change the unix group of the adiministrator user to make it have domain admins as the primary group? Doesn't matter. Windows doesn't use the concept of a primary group. That was included for POSIX compliance. cheers, jerry = Samba--- http://www.samba.org Centeris --- http://www.centeris.com What man is a man who does not make the world better? --Balian -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.2 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFvgtFIR7qMdg1EfYRAn3FAKCsnWdye3q7h719COD/2kssuPB6kACdHMIA dCGonb5hA+8n++KYY+ooSeE= =mKAC -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Impossible to change Primary group
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Fabio Muzzi wrote: Hello drweb, Saturday, November 25, 2006, 4:32:17 PM, you wrote: d By command: d pdbedit -r gad -G 514 -d0 d I cann't change primary group. I was looking through the list archives and found your post. I have the same issue. Any solutions yet? Running Samba 3.0.23d with tdbsam The primary group is based off of the Unix primary group. We not longer store maintain this as a separate value. cheers, jerry = Samba--- http://www.samba.org Centeris --- http://www.centeris.com What man is a man who does not make the world better? --Balian -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.2 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFrpKaIR7qMdg1EfYRAtWvAJ0eLKqAXYN9YRkgAh8LSbGK1qJyqACgqkjw 1uvTjC857EBDRWj5CbxizUQ= =KSFw -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba This is what I have used in the past to change the primary group for some of our users: pdbedit -r gad -G S-1-5-21-3738234612-4042114426-1695072666-513 From what I have read, when changing the group it must start with either the S- or R- Dave. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Impossible to change Primary group
Hello drweb, Saturday, November 25, 2006, 4:32:17 PM, you wrote: d By command: d pdbedit -r gad -G 514 -d0 d I cann't change primary group. I was looking through the list archives and found your post. I have the same issue. Any solutions yet? Running Samba 3.0.23d with tdbsam -- Fabio Kurgan Muzzi -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Impossible to change Primary group
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Fabio Muzzi wrote: Hello drweb, Saturday, November 25, 2006, 4:32:17 PM, you wrote: d By command: d pdbedit -r gad -G 514 -d0 d I cann't change primary group. I was looking through the list archives and found your post. I have the same issue. Any solutions yet? Running Samba 3.0.23d with tdbsam The primary group is based off of the Unix primary group. We not longer store maintain this as a separate value. cheers, jerry = Samba--- http://www.samba.org Centeris --- http://www.centeris.com What man is a man who does not make the world better? --Balian -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.2 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFrpKaIR7qMdg1EfYRAtWvAJ0eLKqAXYN9YRkgAh8LSbGK1qJyqACgqkjw 1uvTjC857EBDRWj5CbxizUQ= =KSFw -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Impossible to change Primary group
I have Samba PDC and use tdbsam backend. I use the version 3.0.11, but recently I have exchanged it for the version 3.0.23c. Now I have a number of problem. Here is one of then. I wish to move one user gad from Domain Users (RID 513) to Domain Guests (RID 514). Now Primary group of user gad is Domain Users: pdbedit -Lv gad -d0 Unix username:gad NT username: Account Flags:[U ] User SID: S-1-5-21-3738234612-4042114426-1695072666-3024 Primary Group SID:S-1-5-21-3738234612-4042114426-1695072666-513 Full Name:Гад еще тот Home Directory: \\unix\gad HomeDir Drive:N: Logon Script: scripts\start.bat Profile Path: \\unix\profiles\gad Domain: ACC Account desc: Workstations: Munged dial: Logon time: 0 Logoff time: Tue, 19 Jan 2038 06:14:07 MSK Kickoff time: Tue, 19 Jan 2038 06:14:07 MSK Password last set:Sat, 25 Nov 2006 16:24:33 MSK Password can change: Sat, 25 Nov 2006 16:24:33 MSK Password must change: Tue, 19 Jan 2038 06:14:07 MSK Last bad password : 0 Bad password count : 0 Logon hours : FF By command: pdbedit -r gad -G 514 -d0 I cann't change primary group. By command: pdbedit -r gad -G 514 -d5 I cann't change primary group too :) but I find out an error (text of my smb.conf is skipped): Attempting to register passdb backend smbpasswd Successfully added passdb backend 'smbpasswd' Attempting to register passdb backend tdbsam Successfully added passdb backend 'tdbsam' Attempting to find an passdb backend to match tdbsam (tdbsam) Found pdb backend tdbsam pdb backend tdbsam has a valid init Netbios name list:- my_netbios_names[0]=UNIX Attempting to find an passdb backend to match tdbsam (tdbsam) Found pdb backend tdbsam pdb backend tdbsam has a valid init tdbsam_open: successfully opened /usr/local/etc/samba/passdb.tdb lookup_global_sam_rid: looking up RID 513. pdb_getsampwrid (TDB): error looking up RID 513 by key RID_0201. Error: Record does not exist store_gid_sid_cache: gid 1069 in cache - S-1-5-21-3738234612-4042114426-1695072666-513 Unix username:gad NT username: Account Flags:[U ] User SID: S-1-5-21-3738234612-4042114426-1695072666-3024 Primary Group SID:S-1-5-21-3738234612-4042114426-1695072666-513 What may be wrong? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
