I have configured a domain controller in samba 3.0.xxx. I followed the how-to at samba.org and I think I may have missed a step because now when I attempt to add a machine to the domain, I get an error. I am using tdbsam as the user/group store. I ran the net group map to make windows groups to unix groups. I have verified that my administrator users are in group wheel. I do not use the map users file. I found that when I put my administrative user names there they were not permitted to log into the domain. Is there a checklist that I can follow to make sure I didn't forget a step? -- David Bear phone: 602-496-0424 fax: 602-496-0955 College of Public Programs/ASU University Center Rm 622 411 N Central Phoenix, AZ 85007-0685 "Beware the IP portfolio, everyone will be suspect of trespassing"
Felipe Augusto van de Wiel
2006-Sep-25 17:13 UTC
[Samba] permissions problem with adding a machine
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 09/19/2006 10:52 PM, David Bear escreveu:> I have configured a domain controller in samba 3.0.xxx. I followed the > how-to at samba.org and I think I may have missed a step because now > when I attempt to add a machine to the domain, I get an error. > > I am using tdbsam as the user/group store. I ran the net group map to > make windows groups to unix groups. I have verified that my > administrator users are in group wheel. > > I do not use the map users file. I found that when I put my > administrative user names there they were not permitted to log into > the domain. > > Is there a checklist that I can follow to make sure I didn't forget a > step?There are no checklists that I'm aware of. Did you try to add a machine with 'root'? Did you set any users in the "Domain Admins" group? (And of course, did 'net groupmap' a unixgroup to the "Domain Admins" group?). If you still have problems, please, send you smb.conf attached with the important part of your log (also increase the loglevel/debuglevel). Kind regards, - -- Felipe Augusto van de Wiel <felipe@paranacidade.org.br> Coordenadoria de Tecnologia da Informa??o (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFGA4oCj65ZxU4gPQRAq7SAKDOibdKc7lpAoADL6g0daUvHOkL0gCfZeKu fJgy9lo0Q17jkbzaAQvX/So=dDb5 -----END PGP SIGNATURE-----