Solved

samba pdc mapping windows groups to unix groups

Posted on 2007-12-05
4
1,269 Views
Last Modified: 2013-12-16
Dear Sir/Madam:

configured the linux as domain controller  
[root@parrot ~]# net groupmap list
Domain Admins (S-1-5-21-386657565-2353459576-620808375-512) -> 533
Domain Users (S-1-5-21-386657565-2353459576-620808375-513) -> users
Domain Guests (S-1-5-21-386657565-2353459576-620808375-514) -> nobody

created unix groups : ntadmins , users and nobody

when tried to map them to windows groups with the following command getting the error :

[root@parrot ~]# groupadd ntadmins
groupadd: group ntadmins exists
[root@parrot ~]# net groupmap modify ntgroup="Domain Admins"unixgroup=ntadmins
NT Group Domain Adminsunixgroup=ntadmins doesn't exist in mapping DB

please help me on this.











0
Comment
Question by:D_wathi
  • 2
  • 2
4 Comments
 
LVL 30

Accepted Solution

by:
Kerem ERSOY earned 500 total points
ID: 20411693
Hi,

You need to use "net groupmap" command to map groups.

This is the usage of the command:
net groupmap add rid=1000 ntgroup="Accounting" unixgroup=acct type=d

Please note the type=d switch it means that the gorup is a domain group.

For mote informaion please browse here:

http://samba.org/samba/docs/man/Samba-HOWTO-Collection/groupmapping.html
0
 

Author Comment

by:D_wathi
ID: 20412644
thanks sir did accordingly could able to map users  and when root login roaming profile is loaded from the linux domain controller but for ordinary samba users following message appears in the windows:

Windows did not load your roaming profile and is attempting to log you on with your local profile. Changes to the profile will not be copied to the server when you logoff. Windows did not load your profile because a server copy of the profile folder already exists that does not have the correct security. Either the current user or the Administrator's group must be the owner of the folder. Contact your network administrator.
0
 
LVL 30

Expert Comment

by:Kerem ERSOY
ID: 20413036
ok so in fact the answer to your question is ok. now you are asking another question. Let me remind you that it is better to close the question and pen-up another one is the best method for people to reach answer. Anyway the answer to your new question is that: Policies require that profiles be owned by the logged in user by defalt to prevent this follow these steps:

   - Run Group Policy editor (gpedit.msc)
   - Select Computer Configuration > Administrative Templates >  System > User Profiles
   - Remove check for user ownership of Roaming Profile Folders (Enabled)

If the key is not already there you can create it too:
    [HKEY_LOCAL_MACHINE \ SOFTWARE \ Policies \ Microsoft \ Windows \ System]:            CompatibleRUPSecurity = dword:00000001
0
 

Author Comment

by:D_wathi
ID: 20414216
thanks so much for the support  i had done the config in windows but stll the same problem finally
after adding the following line in smb.conf file able to login successfully with the roaming profile
but another error will post as a new query.

 write list = @smbusers @root
0

Featured Post

[Webinar] Disaster Recovery and Cloud Management

Learn from Unigma and CloudBerry industry veterans which providers are best for certain use cases and how to lower cloud costs, how to grow your Managed Services practice in IaaS clouds, and how to utilize public cloud for Disaster Recovery

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Introduction People like FTP.  It's a solid, stable, robust protocol for quickly transferring files between two hosts using TCP/IP.  In most cases it's much faster than SMB or CIFS, and certainly much easier to set up between organizations.  This…
Introduction We as admins face situation where we need to redirect websites to another. This may be required as a part of an upgrade keeping the old URL but website should be served from new URL. This document would brief you on different ways ca…
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now