From 4cf87fc667ba10689b219ab6fc693289a5ce5025 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Sun, 3 Feb 2002 03:51:01 +0000 Subject: [PATCH] A new simpiler syntax demands a new simpiler HOWTO. (This can all be reverted if new simpiler syntax was a bad idea...). Andrew Bartlett (This used to be commit 717f45ca3ca85ca47f6d7b9379c17480f0bf82e4) --- docs/textdocs/GROUP-MAPPING-HOWTO.txt | 32 ++++++--------------------- 1 file changed, 7 insertions(+), 25 deletions(-) diff --git a/docs/textdocs/GROUP-MAPPING-HOWTO.txt b/docs/textdocs/GROUP-MAPPING-HOWTO.txt index 6bd29656af8..c266f56548d 100644 --- a/docs/textdocs/GROUP-MAPPING-HOWTO.txt +++ b/docs/textdocs/GROUP-MAPPING-HOWTO.txt @@ -37,32 +37,9 @@ want joe,john and mary, your entry in /etc/group will look like: domadm:x:502:joe,john,mary -3) map this domadm group to the 'domain admins' group: +3) map this domadm group to the 'domain admins' group by running the command: -3.1) lists all the mapped groups by running: smbgroupedit -v - you will get a list looking like the one below. - -NT group (SID) -> Unix group -System Operators (S-1-5-32-549) -> -1 -Replicators (S-1-5-32-552) -> -1 -Guests (S-1-5-32-546) -> -1 -Power Users (S-1-5-32-547) -> -1 -Print Operators (S-1-5-32-550) -> -1 -Administrators (S-1-5-32-544) -> -1 -Account Operators (S-1-5-32-548) -> -1 -Backup Operators (S-1-5-32-551) -> -1 -Users (S-1-5-32-545) -> -1 -Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> -1 -Domain Guests (S-1-5-21-1108995562-3116817432-1375597819-514) -> -1 -Domain Users (S-1-5-21-1108995562-3116817432-1375597819-513) -> -1 - -3.2) map the unix domadm group to the NT 'Domain Admins' group, by running the -command: - - smbgroupedit -c S-1-5-21-1108995562-3116817432-1375597819-512 -u domadm - -warning: don't copy and paste this sample, the Domain Admins SID (the -S-1-5-21-...-512) is different for every PDC. + smbgroupedit -c "Domain Admins" -u domadm you're set, joe, john and mary are domain administrators ! @@ -76,3 +53,8 @@ your samba PDC. Flag that group as a domain group by running: smbgroupedit -a unixgroup -td + +You can list the various groups in the mapping database like this + + smbgroupedit -v + -- 2.34.1