Ignacio Coupeau wrote: > I'm been playing with the groups and LDAP (passdb backend) and found two > problems: >
I found the answer. The problem was caused by "unknow type" in the group type field. By default the builtin-domain and every new group created is marked as "Group type: Unknown type": Domain Admins SID : S-1-5-21-298858960-1863792627-3661451959-512 Unix group: admins Group type: Unknown type Comment : Privilege : SaAddUsers SeMachineAccountPrivilege SaPrintOp With the command smbgroupedit and the flag "-t d" I solved some of the problems: the groups may be searched/imported from the XP and the ldap database is not "enumerated". Ignacio -- ____________________________________________________ Ignacio Coupeau, Ph.D. e-mail: [EMAIL PROTECTED] CTI, Director fax: 948 425619 University of Navarra voice: 948 425600 Pamplona, SPAIN http://www.unav.es/cti/