[Samba] Net groupmap fails
Samba 3.0.6 installed. Net join ads worked perfectly. Net groupmap add fails as follows: lildude# net groupmap add unixgroup=admin ntgroup=Administrators [2004/08/26 09:28:19, 0] param/loadparm.c:map_parameter(2449) Unknown parameter encountered: default_keytab_name [2004/08/26 09:28:19, 0] param/loadparm.c:lp_do_parameter(3139) Ignoring unknown parameter default_keytab_name No rid or sid specified, choosing algorithmic mapping [2004/08/26 09:28:19, 0] lib/smbldap.c:smbldap_connect_system(796) failed to bind to server with dn= Error: Can't contact LDAP server (unknown) [2004/08/26 09:28:35, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1873) ldapsam_search_one_group: Problem during the LDAP search: LDAP error: (unknown) (Timed out) [2004/08/26 09:28:51, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1873) ldapsam_search_one_group: Problem during the LDAP search: LDAP error: (unknown) (Timed out) [2004/08/26 09:29:07, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1873) ldapsam_search_one_group: Problem during the LDAP search: LDAP error: (unknown) (Timed out) [2004/08/26 09:29:23, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1873) ldapsam_search_one_group: Problem during the LDAP search: LDAP error: (unknown) (Timed out) ^C lildude# Any pointers would be most appreciated. Thanks TMS III -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Net groupmap fails
I have yet to get group mapping to work in samba 3.0. Getting very frustrated. I'm using openldap 2.1.23 as the backend database for samba 3.0.0. I've added the base domain groups as posixAccounts to the LDAP database using smbldap-populate.pl. [EMAIL PROTECTED]:/usr/local/etc/openldap# ldapsearch -xv -b o=30greatneck,dc=home,dc=net # Administrator, Users, 30GreatNeck, home.net dn: uid=Administrator,ou=Users,o=30GreatNeck,dc=home,dc=net cn: Administrator sn: Administrator objectClass: inetOrgPerson objectClass: sambaSAMAccount objectClass: posixAccount gidNumber: 512 uid: Administrator uidNumber: 998 homeDirectory: /accounts sambaPwdLastSet: 0 sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 sambaPwdCanChange: 0 sambaPwdMustChange: 2147483647 sambaHomePath: \\Lnxsrv2\accounts sambaHomeDrive: H: sambaProfilePath: \\Lnxsrv2\profiles\ sambaPrimaryGroupSID: S-1-5-21-739112995-4084651483-89095900-512 sambaLMPassword: XXX sambaNTPassword: XXX sambaAcctFlags: [U ] sambaSID: S-1-5-21-739112995-4084651483-89095900-2996 loginShell: /bin/false gecos: Netbios Domain Administrator # nobody, Users, 30GreatNeck, home.net dn: uid=nobody,ou=Users,o=30GreatNeck,dc=home,dc=net cn: nobody sn: nobody objectClass: inetOrgPerson objectClass: sambaSAMAccount objectClass: posixAccount gidNumber: 514 uid: nobody uidNumber: 999 homeDirectory: /dev/null sambaPwdLastSet: 0 sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 sambaPwdCanChange: 0 sambaPwdMustChange: 2147483647 sambaHomePath: \\Lnxsrv2\accounts sambaHomeDrive: H: sambaProfilePath: \\Lnxsrv2\profiles\ sambaPrimaryGroupSID: S-1-5-21-739112995-4084651483-89095900-514 sambaLMPassword: NO PASSWORDX sambaNTPassword: NO PASSWORDX sambaAcctFlags: [NU ] sambaSID: S-1-5-21-739112995-4084651483-89095900-2998 loginShell: /bin/false # Domain Admins, Groups, 30GreatNeck, home.net # Domain Admins, Groups, 30GreatNeck, home.net dn: cn=Domain Admins,ou=Groups,o=30GreatNeck,dc=home,dc=net objectClass: posixGroup gidNumber: 512 cn: Domain Admins memberUid: Administrator description: Netbios Domain Administrators (need smb.conf configuration) # Domain Users, Groups, 30GreatNeck, home.net dn: cn=Domain Users,ou=Groups,o=30GreatNeck,dc=home,dc=net objectClass: posixGroup gidNumber: 513 cn: Domain Users description: Netbios Domain Users (not implemented yet) memberUid: kent # Domain Guests, Groups, 30GreatNeck, home.net dn: cn=Domain Guests,ou=Groups,o=30GreatNeck,dc=home,dc=net objectClass: posixGroup gidNumber: 514 cn: Domain Guests description: Netbios Domain Guests Users (not implemented yet) # Administrators, Groups, 30GreatNeck, home.net dn: cn=Administrators,ou=Groups,o=30GreatNeck,dc=home,dc=net objectClass: posixGroup gidNumber: 544 cn: Administrators description: Netbios Domain Members can fully administer the computer/sambaDom ainName (not implemented yet) # Users, Groups, 30GreatNeck, home.net dn: cn=Users,ou=Groups,o=30GreatNeck,dc=home,dc=net objectClass: posixGroup gidNumber: 545 cn: Users description: Netbios Domain Ordinary users (not implemented yet) # Guests, Groups, 30GreatNeck, home.net dn: cn=Guests,ou=Groups,o=30GreatNeck,dc=home,dc=net objectClass: posixGroup gidNumber: 546 cn: Guests memberUid: nobody description: Netbios Domain Users granted guest access to the computer/sambaDo mainName (not implemented yet) # Power Users, Groups, 30GreatNeck, home.net dn: cn=Power Users,ou=Groups,o=30GreatNeck,dc=home,dc=net objectClass: posixGroup gidNumber: 547 cn: Power Users description: Netbios Domain Members can share directories and printers (not im plemented yet) # Account Operators, Groups, 30GreatNeck, home.net dn: cn=Account Operators,ou=Groups,o=30GreatNeck,dc=home,dc=net objectClass: posixGroup gidNumber: 548 cn: Account Operators description: Netbios Domain Users to manipulate users accounts (not implemente d yet) # Server Operators, Groups, 30GreatNeck, home.net dn: cn=Server Operators,ou=Groups,o=30GreatNeck,dc=home,dc=net objectClass: posixGroup gidNumber: 549 cn: Server Operators description: Netbios Domain Server Operators (need smb.conf configuration) # Print Operators, Groups, 30GreatNeck, home.net dn: cn=Print Operators,ou=Groups,o=30GreatNeck,dc=home,dc=net objectClass: posixGroup gidNumber: 550 cn: Print
Re: Réf. : [Samba] Net groupmap fails
Stephanie, Thank you for your help. I tryed what you suggest but no luck.. I get this: [EMAIL PROTECTED]:~# /usr/local/samba/bin/net groupmap add ntgroup=Domain Admins unixgroup=Domain Admins rid=512 Can't lookup UNIX group Domain Admins Is there something with initial compiling samba 3.0.0 that would disable this? All the documentation that I've seen makes it look so easy, but I can't get it to work. On Fri, 2003-11-07 at 06:48, [EMAIL PROTECTED] wrote: try /usr/local/samba/bin/net groupmap add ntgroup=Domain Admins unixgroup=Domain Admins rid=512 dn: cn=Domain Admins,ou=Groups,o=30GreatNeck,dc=home,dc=net objectClass: posixGroup This group is the unix group. --- Stphane PURNELLE [EMAIL PROTECTED] Service Informatique Corman S.A. Tel : 00 32 087/342467 Kent L. Nasveschuk [EMAIL PROTECTED] Envoy par : Pour : Samba List Server [EMAIL PROTECTED] [EMAIL PROTECTED]cc : .samba.org Objet : [Samba] Net groupmap fails 07/11/2003 12:31 I have yet to get group mapping to work in samba 3.0. Getting very frustrated. I'm using openldap 2.1.23 as the backend database for samba 3.0.0. I've added the base domain groups as posixAccounts to the LDAP database using smbldap-populate.pl. [EMAIL PROTECTED]:/usr/local/etc/openldap# ldapsearch -xv -b o=30greatneck,dc=home,dc=net # Administrator, Users, 30GreatNeck, home.net dn: uid=Administrator,ou=Users,o=30GreatNeck,dc=home,dc=net cn: Administrator sn: Administrator objectClass: inetOrgPerson objectClass: sambaSAMAccount objectClass: posixAccount gidNumber: 512 uid: Administrator uidNumber: 998 homeDirectory: /accounts sambaPwdLastSet: 0 sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 sambaPwdCanChange: 0 sambaPwdMustChange: 2147483647 sambaHomePath: \\Lnxsrv2\accounts sambaHomeDrive: H: sambaProfilePath: \\Lnxsrv2\profiles\ sambaPrimaryGroupSID: S-1-5-21-739112995-4084651483-89095900-512 sambaLMPassword: XXX sambaNTPassword: XXX sambaAcctFlags: [U ] sambaSID: S-1-5-21-739112995-4084651483-89095900-2996 loginShell: /bin/false gecos: Netbios Domain Administrator # nobody, Users, 30GreatNeck, home.net dn: uid=nobody,ou=Users,o=30GreatNeck,dc=home,dc=net cn: nobody sn: nobody objectClass: inetOrgPerson objectClass: sambaSAMAccount objectClass: posixAccount gidNumber: 514 uid: nobody uidNumber: 999 homeDirectory: /dev/null sambaPwdLastSet: 0 sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 sambaPwdCanChange: 0 sambaPwdMustChange: 2147483647 sambaHomePath: \\Lnxsrv2\accounts sambaHomeDrive: H: sambaProfilePath: \\Lnxsrv2\profiles\ sambaPrimaryGroupSID: S-1-5-21-739112995-4084651483-89095900-514 sambaLMPassword: NO PASSWORDX sambaNTPassword: NO PASSWORDX sambaAcctFlags: [NU ] sambaSID: S-1-5-21-739112995-4084651483-89095900-2998 loginShell: /bin/false # Domain Admins, Groups, 30GreatNeck, home.net # Domain Admins, Groups, 30GreatNeck, home.net dn: cn=Domain Admins,ou=Groups,o=30GreatNeck,dc=home,dc=net objectClass: posixGroup gidNumber: 512 cn: Domain Admins memberUid: Administrator description: Netbios Domain Administrators (need smb.conf configuration) # Domain Users, Groups, 30GreatNeck, home.net dn: cn=Domain Users,ou=Groups,o=30GreatNeck,dc=home,dc=net objectClass: posixGroup gidNumber: 513 cn: Domain Users description: Netbios Domain Users (not implemented yet) memberUid: kent # Domain Guests, Groups, 30GreatNeck, home.net dn: cn=Domain Guests,ou=Groups,o=30GreatNeck,dc=home,dc=net objectClass
Re: Rf. : [Samba] Net groupmap fails
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kent L. Nasveschuk wrote: | [EMAIL PROTECTED]:~# /usr/local/samba/bin/net groupmap add ntgroup=Domain | Admins unixgroup=Domain Admins rid=512 | Can't lookup UNIX group Domain Admins | | Is there something with initial compiling samba 3.0.0 that would disable | this? All the documentation that I've seen makes it look so easy, but I | can't get it to work. Should work as far as I can tell. try running ~ net groupmap add ntgroup=Domain Admins \ ~ unixgroup=Domain Admins rid=512 --debuglevel=10 and see if you get any clues. cheers, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ You can never go home again, Oatman, but I guess you can shop there. ~--John Cusack - Grosse Point Blank (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/q7rgIR7qMdg1EfYRApNLAJ9Vl+zRDF6dcF/ILcLBXx1KUyEniQCg2jm8 awcVVG2Haash31wV5FKIRvo= =AzvU -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: Réf. : [Samba] Net groupmap fails
On Fri, 7 Nov 2003, Kent L. Nasveschuk wrote: Stephanie, Thank you for your help. I tryed what you suggest but no luck.. I get this: [EMAIL PROTECTED]:~# /usr/local/samba/bin/net groupmap add ntgroup=Domain Admins unixgroup=Domain Admins rid=512 Can't lookup UNIX group Domain Admins Is there something with initial compiling samba 3.0.0 that would disable this? All the documentation that I've seen makes it look so easy, but I can't get it to work. No. You need to add scripts that will work on your system for entries like: add machine script add user script add group script Here are the minimal entries for my current network configuration: add user script = /usr/sbin/useradd -m %u delete user script = /usr/sbin/userdel -r %u add group script = /usr/sbin/groupadd %g delete group script = /usr/sbin/groupadd %g add user to group script = /usr/sbin/usermod -G %g %u add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null %u I hope this helps you. Note: The Linux groupadd utility will NOT allow you to add a group that has upper case characters or spaces in it! Cheers, John T. On Fri, 2003-11-07 at 06:48, [EMAIL PROTECTED] wrote: try /usr/local/samba/bin/net groupmap add ntgroup=Domain Admins unixgroup=Domain Admins rid=512 dn: cn=Domain Admins,ou=Groups,o=30GreatNeck,dc=home,dc=net objectClass: posixGroup This group is the unix group. --- Stphane PURNELLE [EMAIL PROTECTED] Service Informatique Corman S.A. Tel : 00 32 087/342467 Kent L. Nasveschuk [EMAIL PROTECTED] Envoy par : Pour : Samba List Server [EMAIL PROTECTED] [EMAIL PROTECTED]cc : .samba.org Objet : [Samba] Net groupmap fails 07/11/2003 12:31 I have yet to get group mapping to work in samba 3.0. Getting very frustrated. I'm using openldap 2.1.23 as the backend database for samba 3.0.0. I've added the base domain groups as posixAccounts to the LDAP database using smbldap-populate.pl. [EMAIL PROTECTED]:/usr/local/etc/openldap# ldapsearch -xv -b o=30greatneck,dc=home,dc=net # Administrator, Users, 30GreatNeck, home.net dn: uid=Administrator,ou=Users,o=30GreatNeck,dc=home,dc=net cn: Administrator sn: Administrator objectClass: inetOrgPerson objectClass: sambaSAMAccount objectClass: posixAccount gidNumber: 512 uid: Administrator uidNumber: 998 homeDirectory: /accounts sambaPwdLastSet: 0 sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 sambaPwdCanChange: 0 sambaPwdMustChange: 2147483647 sambaHomePath: \\Lnxsrv2\accounts sambaHomeDrive: H: sambaProfilePath: \\Lnxsrv2\profiles\ sambaPrimaryGroupSID: S-1-5-21-739112995-4084651483-89095900-512 sambaLMPassword: XXX sambaNTPassword: XXX sambaAcctFlags: [U ] sambaSID: S-1-5-21-739112995-4084651483-89095900-2996 loginShell: /bin/false gecos: Netbios Domain Administrator # nobody, Users, 30GreatNeck, home.net dn: uid=nobody,ou=Users,o=30GreatNeck,dc=home,dc=net cn: nobody sn: nobody objectClass: inetOrgPerson objectClass: sambaSAMAccount objectClass: posixAccount gidNumber: 514 uid: nobody uidNumber: 999 homeDirectory: /dev/null sambaPwdLastSet: 0 sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 sambaPwdCanChange: 0 sambaPwdMustChange: 2147483647 sambaHomePath: \\Lnxsrv2\accounts sambaHomeDrive: H: sambaProfilePath: \\Lnxsrv2\profiles\ sambaPrimaryGroupSID: S-1-5-21-739112995-4084651483-89095900-514 sambaLMPassword: NO PASSWORDX sambaNTPassword: NO PASSWORDX sambaAcctFlags: [NU ] sambaSID: S-1-5-21-739112995-4084651483-89095900-2998 loginShell: /bin/false # Domain Admins, Groups, 30GreatNeck, home.net # Domain Admins, Groups, 30GreatNeck, home.net dn: cn=Domain Admins,ou=Groups,o=30GreatNeck,dc=home,dc=net objectClass: posixGroup gidNumber: 512 cn: Domain Admins memberUid: Administrator description: Netbios Domain Administrators (need smb.conf configuration) # Domain Users, Groups, 30GreatNeck, home.net dn: cn=Domain Users,ou=Groups,o=30GreatNeck,dc=home,dc=net objectClass: posixGroup gidNumber: 513 cn: Domain Users description: Netbios Domain Users (not implemented yet) memberUid: kent # Domain Guests, Groups, 30GreatNeck, home.net dn: cn=Domain Guests,ou=Groups,o=30GreatNeck,dc=home,dc=net objectClass: posixGroup gidNumber: 514 cn: Domain Guests description: Netbios Domain Guests Users (not implemented yet) # Administrators, Groups, 30GreatNeck, home.net dn: cn=Administrators,ou=Groups,o=30GreatNeck,dc
Re: Rf. : [Samba] Net groupmap fails
On Fri, 7 Nov 2003, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kent L. Nasveschuk wrote: | [EMAIL PROTECTED]:~# /usr/local/samba/bin/net groupmap add ntgroup=Domain | Admins unixgroup=Domain Admins rid=512 | Can't lookup UNIX group Domain Admins | | Is there something with initial compiling samba 3.0.0 that would disable | this? All the documentation that I've seen makes it look so easy, but I | can't get it to work. Should work as far as I can tell. try running ~ net groupmap add ntgroup=Domain Admins \ ~ unixgroup=Domain Admins rid=512 --debuglevel=10 and see if you get any clues. Hint: Make sure that you have all your add scripts in place. Also, make sure that these scripts can handle object names that have upper case characters and/or spaces in them. PS: groupadd does NOT permit spaces or upper case characters in a group name. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: Réf. : [Samba] Net groupmap fails
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John H Terpstra wrote: |Should work as far as I can tell. try running | |~ net groupmap add ntgroup=Domain Admins \ |~ unixgroup=Domain Admins rid=512 --debuglevel=10 | |and see if you get any clues. | | | Hint: Make sure that you have all your add scripts | in place. Also, make sure that these scripts can handle | object names that have upper case characters and/or | spaces in them. Does matter here. net group map doesn't run them for you anyways. And in this case the group already existed. | PS: groupadd does NOT permit spaces or upper case | characters in a group name. In the unix group name? or the nt group name? I know the ntgroup name is fine. If the unix group name won't accept spaces, then this is a bug. (which is why I asked for a log to start with). ciao, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ If we're adding to the noise, turn off this song --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/q8OvIR7qMdg1EfYRAsyGAKDtVsl4h/vIi+E1ZuMjuV368esfwwCgxZ8W gDyTYIou+TeI+46od+gdbxU= =YkeB -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: Réf. : [Samba] Net groupmap fails
On Fri, 7 Nov 2003, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John H Terpstra wrote: |Should work as far as I can tell. try running | |~ net groupmap add ntgroup=Domain Admins \ |~ unixgroup=Domain Admins rid=512 --debuglevel=10 | |and see if you get any clues. | | | Hint: Make sure that you have all your add scripts | in place. Also, make sure that these scripts can handle | object names that have upper case characters and/or | spaces in them. Does matter here. net group map doesn't run them for you anyways. And in this case the group already existed. It matters if you do a net rpc vampire, which does call the add X scripts. | PS: groupadd does NOT permit spaces or upper case | characters in a group name. In the unix group name? or the nt group name? I know the ntgroup name is fine. If the unix group name won't accept spaces, then this is a bug. (which is why I asked for a log to start with). Please note that I specifically said that the groupadd utility does not permit uppercase of spaces. Linux works fine with groups that have up to 32 characters, even with uppercase and spaces. It is the groupadd utility that is broken in Linux distributions. This utility is part of the shadow-utils package.I wrote to the maintainer a long time back but have not had any reply. I also tried to pursue this through other avenues who simply told me to suck it up - lower case is the UNIX way!. :) Go figure! - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: Réf. : [Samba] Net groupmap fails
When I ran smbldap_populate.pl the objectclass sambaGroupMapping was not present.I don't know if it is supposed to be created or not but when I used ldapmodify with and a file that contained: dn: cn=Domain Admins,ou=Groups,o=30GreatNeck,dc=home,dc=net add: objectclass objectclass: sambaGroupMapping sambaSID: S-1-5-21-739112995-4084651483-89095900-512 sambaGroupType: 2 Now when I run net groupmap list I get Domain Admins (S-1-5-21...512) = 512 Guess I will have to do that with all of the groups created by smbldap-populate.pl. found at archive: http://www.mail-archive.com/[EMAIL PROTECTED]/msg21134.html Am I doing this right? On Fri, 2003-11-07 at 10:31, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kent L. Nasveschuk wrote: | [EMAIL PROTECTED]:~# /usr/local/samba/bin/net groupmap add ntgroup=Domain | Admins unixgroup=Domain Admins rid=512 | Can't lookup UNIX group Domain Admins | | Is there something with initial compiling samba 3.0.0 that would disable | this? All the documentation that I've seen makes it look so easy, but I | can't get it to work. Should work as far as I can tell. try running ~ net groupmap add ntgroup=Domain Admins \ ~ unixgroup=Domain Admins rid=512 --debuglevel=10 and see if you get any clues. cheers, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ You can never go home again, Oatman, but I guess you can shop there. ~--John Cusack - Grosse Point Blank (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/q7rgIR7qMdg1EfYRApNLAJ9Vl+zRDF6dcF/ILcLBXx1KUyEniQCg2jm8 awcVVG2Haash31wV5FKIRvo= =AzvU -END PGP SIGNATURE- -- Kent L. Nasveschuk [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: Réf. : [Samba] Net groupmap fails
Did run a lower debug level -d 2 which gave me a clue that there was no objectclass sambaGroupMapping. Kent On Fri, 2003-11-07 at 11:09, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John H Terpstra wrote: |Should work as far as I can tell. try running | |~ net groupmap add ntgroup=Domain Admins \ |~ unixgroup=Domain Admins rid=512 --debuglevel=10 | |and see if you get any clues. | | | Hint: Make sure that you have all your add scripts | in place. Also, make sure that these scripts can handle | object names that have upper case characters and/or | spaces in them. Does matter here. net group map doesn't run them for you anyways. And in this case the group already existed. | PS: groupadd does NOT permit spaces or upper case | characters in a group name. In the unix group name? or the nt group name? I know the ntgroup name is fine. If the unix group name won't accept spaces, then this is a bug. (which is why I asked for a log to start with). ciao, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ If we're adding to the noise, turn off this song --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/q8OvIR7qMdg1EfYRAsyGAKDtVsl4h/vIi+E1ZuMjuV368esfwwCgxZ8W gDyTYIou+TeI+46od+gdbxU= =YkeB -END PGP SIGNATURE- -- Kent L. Nasveschuk [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: Réf. : [Samba] Net groupmap fails
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John H Terpstra wrote: |Does matter here. net group map doesn't run them and this was supposed to does not. Sorry for the typo. |for you anyways. And in this case the group already |existed. | | | It matters if you do a net rpc vampire, which does | call the add X scripts. Right. I know this. I've worked on that code a fair amount. :-) But that is not what we are doing here. Let's not confuse the issue. | Please note that I specifically said that the groupadd | utility does not permit uppercase of spaces. Linux works | fine with groups that have up to 32 characters, even | with uppercase and spaces. ok. but i'll point out that you are confusing the issue again. Let's stay on topic here. We are dealing with ldap posixGroups here. ciao, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ If we're adding to the noise, turn off this song --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/q8r2IR7qMdg1EfYRApYDAJwNkDvotJj3bjAufwtp4vZ+LbOXSwCZAYg9 e+k0mFmgYx3mse2+80NmWmA= =q3hV -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: Réf. : [Samba] Net groupmap fails
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kent L. Nasveschuk wrote: | Did run a lower debug level -d 2 which gave me a clue that there was no | objectclass sambaGroupMapping. There shoudl be no match it you haven't added a group mapping entry. You've bypassed the problem but not helped me to figure out why it was failing in this place. cheers, jerry - -- ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ If we're adding to the noise, turn off this song --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/q9GYIR7qMdg1EfYRAoGjAJ4xKnOC12vNc8Ylr5Sg9p6ANXL6RwCfVSR+ HvFxGmmg90drgJGAoeUEz4o= =e+IK -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba