Re: [Samba] Re: Group mapping problem
Hello, I have installed samba 3.0.1 and doesn't work. In some cases prevents other users to access to windows shares (I can solve this rebooting windows, but sometimes needs several reboots). I'm back to samba 3.0.0 but group mapping still doesn't work Thanks for your help. - Original Message - From: Jérôme Fenal [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, December 16, 2003 3:04 PM Subject: [Samba] Re: Group mapping problem Gonzalo Aguilera wrote: Hi, I'm using tdb and Samba 3.0.0 in /etc/group I have domadm:x:502:yo,tu net groupmap Domain Admins (S-1-5-21-1113206677-1823813211-1234567-512) - domadm [snip] root directory = administrator Do you really need this one ? Maybe it wont't find the administrator file system directory, and thus, won't find either the /etc/passwd and /etc/group ? I also know of some problem with the secondary group specified in the valid users clause. But I encountered it only with W98 clients. Please see test 3. below to confirm bug with W2K client (samba bug 882). Could you : 1. Try to use last version of Samba (3.0.1) 2. If 3.0.1 doesn't work, set the primary group of the user to 'Domain Admins' and retry 3. Provide a 'log level=10' log of only the access to the share (ie. logfile before access, access it, cp logfile logfile.archive) 2. and 3. done with 3.0.1 if possible. Please also specify the OS Samba's running on. Regards, Jêrôme - Original Message - From: Jérôme Fenal [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, December 15, 2003 1:55 PM Subject: [Samba] Re: Group mapping problem Gonzalo Aguilera wrote: Hi, I have Samba 3 as Domain controller. From a Windows 2000 Professional I share a folder (c:\test) with access permission for certain domain user (MYDOMAIN\yo). I can access to that folder from other w2000 with that user validated into it. If I add that user to a unix group (domadm) and map this group to Domain Admins (net groupmap modify ntgroup=Domain Admins unixgroup=domadm) and change w2000 shared folder access permission for group MYDOMAIN\Domain Admins I get Access Denied. What's wrong? It also seems Thanks. Please include more informations about your setup : - What sam type are you using (tdb, ldap, etc.) ? - Include a copy of testparm output - Include the content of the mapping (ie. which RID dd you give to the domadmin group?) - What version of Samba 3 (3.0.0, 3.0.1pre?, 3.0.1rc?) - and any more information that would be valuable to answer you Regards, Jérôme -- Jérôme Fenal - Consultant Unix/SAN/Logiciel Libre Groupe Expert Managed Services - LogicaCMG France http://www.logicacmg.com/fr/ - mailto:jerome.fenal AT logicacmg.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Group mapping problem
Hi, I'm using tdb and Samba 3.0.0 in /etc/group I have domadm:x:502:yo,tu net groupmap Domain Admins (S-1-5-21-1113206677-1823813211-1234567-512) - domadm Output of testparm: Processing section [netlogon] Processing section [profiles] Processing section [homes] Loaded services file OK. Server role: ROLE_DOMAIN_PDC Press enter to see a dump of your service definitions # Global parameters [global] unix charset = ISO-8859-15 display charset = ISO-8859-15 workgroup = MYDOMAIN netbios name = SERVIDOR root directory = administrator add machine script = /usr/sbin/useradd -d /dev/null -g maquinas -s /bin/false -M %u logon script = logon.bat logon path = \\%N\profiles\%u logon drive = I: logon home = \\%N\profiles\%u\.profiles domain logons = Yes os level = 64 preferred master = Yes domain master = Yes [netlogon] path = /usr/local/samba/lib/netlogon browseable = No [profiles] path = /profiles read only = No create mask = 0600 directory mask = 0700 browseable = No [homes] read only = No create mask = 0770 directory mask = 0770 browseable = No Thanks. - Original Message - From: Jérôme Fenal [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, December 15, 2003 1:55 PM Subject: [Samba] Re: Group mapping problem Gonzalo Aguilera wrote: Hi, I have Samba 3 as Domain controller. From a Windows 2000 Professional I share a folder (c:\test) with access permission for certain domain user (MYDOMAIN\yo). I can access to that folder from other w2000 with that user validated into it. If I add that user to a unix group (domadm) and map this group to Domain Admins (net groupmap modify ntgroup=Domain Admins unixgroup=domadm) and change w2000 shared folder access permission for group MYDOMAIN\Domain Admins I get Access Denied. What's wrong? Thanks. Please include more informations about your setup : - What sam type are you using (tdb, ldap, etc.) ? - Include a copy of testparm output - Include the content of the mapping (ie. which RID dd you give to the domadmin group?) - What version of Samba 3 (3.0.0, 3.0.1pre?, 3.0.1rc?) - and any more information that would be valuable to answer you Regards, Jérôme -- Jérôme Fenal - Consultant Unix/SAN/Logiciel Libre Groupe Expert Managed Services - LogicaCMG France http://www.logicacmg.com/fr/ - mailto:jerome.fenal AT logicacmg.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Group mapping problem
Gonzalo Aguilera wrote: Hi, I have Samba 3 as Domain controller. From a Windows 2000 Professional I share a folder (c:\test) with access permission for certain domain user (MYDOMAIN\yo). I can access to that folder from other w2000 with that user validated into it. If I add that user to a unix group (domadm) and map this group to Domain Admins (net groupmap modify ntgroup=Domain Admins unixgroup=domadm) and change w2000 shared folder access permission for group MYDOMAIN\Domain Admins I get Access Denied. What's wrong? Thanks. Please include more informations about your setup : - What sam type are you using (tdb, ldap, etc.) ? - Include a copy of testparm output - Include the content of the mapping (ie. which RID dd you give to the domadmin group?) - What version of Samba 3 (3.0.0, 3.0.1pre?, 3.0.1rc?) - and any more information that would be valuable to answer you Regards, Jérôme -- Jérôme Fenal - Consultant Unix/SAN/Logiciel Libre Groupe Expert Managed Services - LogicaCMG France http://www.logicacmg.com/fr/ - mailto:jerome.fenal AT logicacmg.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
