Still trying..., so...
I made user [Domain]\Administrator, I run usrmgr as it, when I open a local
group, usrmgr shows message:
The specified local group does not exist.
And the log still says:
[2005/10/26 18:42:48, 0] lib/smbldap.c:smbldap_open(822)
smbldap_open: cannot access LDAP when not root..
[2005/10/26 18:42:48, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1972)
ldapsam_search_one_group: Problem during the LDAP search: LDAP error:
(Time limit exceeded)
Yes, Administrator's group is "Domain Admins" and I set all the privs to it,
but I don't set the privs to Administrator, should I do it? IMO, it still
will not work, cause when I applied all privs to a user, it failed.
Why I made user Administrator, cause it's noticed on the doc to create a
user that will manage the domain besides user root or even not to use user
root. The user root will be removed as soon as poosible.
TiA,
yaya
----- Original Message -----
From: "yaya" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Wednesday, October 26, 2005 3:59 PM
Subject: Re: [Samba] can't open/create local group with usrmgr
Yes, I 'enable privileges = yes' in smb.conf.
[EMAIL PROTECTED] sbin]# ./smbldap-usermod -G +512 yaya
User "yaya" already member of the group "512".
..but....
[EMAIL PROTECTED] sbin]# ldapsearch -x -D
cn=Manager,dc=sma,dc=al-izhar-jkt,dc=sch,dc=id -W uid=yaya
...cutted....
gidNumber: 513
sambaPrimaryGroupSID: S-1-5-21-2567078096-2875653774-645762936-513
...cutted....
Should I set the 'gidNumber: 512 and the 'sambaPrimaryGroupSID:
S-1-5-21-2567078096-2875653774-645762936-512' too?
[EMAIL PROTECTED] sbin]# net rpc rights list accounts
Password:
..cutted..
SMA\Domain Admins
SeMachineAccountPrivilege
SeRemoteShutdownPrivilege
SePrintOperatorPrivilege
SeAddUsersPrivilege
SeDiskOperatorPrivilege
..cutted..
TiA,
yaya
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
