Hey, I'm running Samba version 3.0.28 and having trouble with the automatic creation of builtin groups on the server, I'm using the AD idmap backend. Quite often I get the following error:
[2008/02/18 14:04:25, 2] auth/auth_util.c:create_local_nt_token(941) create_local_nt_token: Failed to create BUILTIN\Users group! This seems to indicate that the server is unable to create builtin accounts, it also happens for the BUILTIN\administrators group and others. Running "net sam createbuiltingroup" returns: NT_STATUS_ACCESS_DENIED Can anyone give me a pointer in the right direction. Config file: ---- [global] # Security Mode Setup realm = ER.DTU.DK workgroup = er security = ADS server string = "ERVOL" # Network Binding and Optimizations interfaces = 192.38.76.3 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 # User and Group information Setup idmap backend = ad #winbind nss info = sfu winbind nss info = rfc2307 # Enable msDFS, so it can be enabled on specific shares host msdfs = yes # Wins #wins server = 192.38.76.14 192.38.76.25 # Simplifies the use of kerberos by populating /etc/krb5.keytab for us. use kerberos keytab = yes # Printing Setup, deactivates printing. printcap name = /etc/printcap load printers = no printing = no # Unix Permissions to NT Permissions setup nt acl support = yes dos file mode = yes map hidden = yes log level = 2 ----- Regards, Rasmus Larsen Env DTU -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
