[Samba] Re: Administering Groups

2005-11-13 Thread paul kölle
Simon Faulkner wrote:
> net groupmap list ntgroup="Domain Admins"
> Domain Admins (S-1-5-21-1065375514-2370838480-4047619883-512) -> -1
> 
> 
> 
> Does this mean I have no group for Domain Admins?
yes

> 
> Do I need to map them to root?
depends, AFAIK the "root" group is not special wrt samba, but it usually
owns a lot of security related files so I'd stay away from it. Make a
new group, say "domadms", map it to "Domain Admins" and use it on the
unix side. You can exploit the privilege (man smb.conf 
/privileges) feature to give members special rights on the
windows side.

hth
 Paul


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Administering Groups

2005-11-12 Thread Simon Faulkner

net groupmap list ntgroup="Domain Admins"
Domain Admins (S-1-5-21-1065375514-2370838480-4047619883-512) -> -1



Does this mean I have no group for Domain Admins?

Do I need to map them to root?

TIA

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Administering Groups

2005-11-12 Thread Simon Faulkner

I am wondering where to look for groups etc!


Hmmm, it all seems to be done with net groupmap list

It's great, as you peer down into the murk you understand the next layer 
and you realise there are many more layers of voodoo to go!


wish me luck...


Sim
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Administering Groups

2005-11-12 Thread Simon Faulkner

paul kölle wrote:

Simon Faulkner wrote:


I have my Samba PDC running :-)

How do I administer groups from the samba box?

usrmgr.exe runs on the workstation but won't let me see groups


have you setup groupmapping?



Err, not sure!  I used the vampire to get the details from the NT4 PDC

I am wondering where to look for groups etc!

Sim
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Administering Groups

2005-11-12 Thread paul kölle
Simon Faulkner wrote:
> I have my Samba PDC running :-)
> 
> How do I administer groups from the samba box?
> 
> usrmgr.exe runs on the workstation but won't let me see groups
have you setup groupmapping?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba