Re: [Samba] Queries regarding domain groups

2004-01-16 Thread Beast 
On Fri, 16 Jan 2004 08:05:15 +1100
Ross Saad [EMAIL PROTECTED] wrote:


  In /etc/group it seems as though users have been assigned to groups, but I

Mapping is not store in there, this is nothing to do with samba groupmapping.

  can't retrieve a user's group(s) from Windows. Also, I notice that our
  smb.conf doesn't have a section for domain admin group or domain guest

I think it time to read the samba howto collection, chapter account information db.

  group. Would it help my cause from Windows to add these in? How
  can I assign
  domain administrator that will be recognised through Windows and will this
  administrator be able to perform my intent?

It must have rid 500 and group sid 512.

 
  Is it possible to achieve any of this given the system over here?
  I've read
  that Samba 3 has new support for Windows group mapping, although I'm not
  sure if group creation and administration will be possible
  through Windows.

It depends on samba bacakend db, if in ldap, you can directly modify the entry (if you 
confident enough), otherwise it must be using rpc call or invoke the net groupmap 
command.

The easiest way is to start playing with net groupmap command and examine what changed 
in db backend after you run.



--beast

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Queries regarding domain groups

2004-01-15 Thread Ross Saad 
Anyone?

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]
 Behalf Of Ross Saad
 Sent: Thursday, 15 January 2004 9:29 AM
 To: [EMAIL PROTECTED]
 Subject: [Samba] Queries regarding domain groups


 Hi,

 I'm trying to understand the way Samba maps groups to Windows.

 Linux version 2.4.17 (gcc version 2.96 2731 (Red Hat Linux
 7.1 2.96-98))
 Samba Version 2.2.7a

 Basically, what I'm trying to do involves setting up certain groups on the
 Windows domain and assigning them to users.
 Using VB and ADSI, I can get a list of all groups and all users on the
 domain. However, it doesn't seem possible to create groups on the
 domain or
 to retrieve a user's groups.

 I understand that groups and group info on the server are stored in
 /etc/group. Some of these groups are in the list that I can retrieve,
 together with some Windows groups, eg. Print Operators. Where do
 the Windows
 groups come from?

 In /etc/group it seems as though users have been assigned to groups, but I
 can't retrieve a user's group(s) from Windows. Also, I notice that our
 smb.conf doesn't have a section for domain admin group or domain guest
 group. Would it help my cause from Windows to add these in? How
 can I assign
 domain administrator that will be recognised through Windows and will this
 administrator be able to perform my intent?

 Is it possible to achieve any of this given the system over here?
 I've read
 that Samba 3 has new support for Windows group mapping, although I'm not
 sure if group creation and administration will be possible
 through Windows.

 Any help is much appreciated.

 Thanks,
 Ross

 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba