[Pkg-samba-maint] Bug#385372: samba: create_builtin_administrators still problematic

Cyril Chaboisseau cyril.chaboisseau at obs.coe.int
Thu Nov 16 00:41:54 CET 2006


* Andreas Barth <aba at not.so.argh.org> [2006-11-15 23:43 +0100]:
> Can you check whether you have idmap uid and idmap gid enabled in
> /etc/samba/smb.conf? I started to work for me after I put some defaults
> in there.

actually I did test it at that time but quickly reverted my changes
because some users couldn't access some shares
although I did change many parameters at once and I couldn't tell if the
errors was a side effect of one of those parameters I changed :

winbind separator = \
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind enum users = yes
winbind enum groups = yes

as well as a "force group" on the share

here is the errors I had afterwards :

[2006/09/22 09:38:11, 2] smbd/service.c:make_connection_snum(571)
  user 'mg' (from session setup) not permitted to access this share (docs)
[2006/09/22 09:38:11, 2] smbd/service.c:make_connection_snum(571)
  user 'mg' (from session setup) not permitted to access this share (docs)

as well as the "classical"

[2006/09/22 09:38:14, 0] auth/auth_util.c:create_builtin_administrators(785)
  create_builtin_administrators: Failed to create Administrators
[2006/09/22 09:38:14, 2] auth/auth_util.c:create_local_nt_token(899)
  create_local_nt_token: Failed to create BUILTIN\Administrators group!


but now, maybe things have changed since 3.0.23c-4 so I will try again
to change the idmap uid/gid parameters only (maybe the errors came from
the "force group" or another param.)

I'll get back to you

-- 
Cyril Chaboisseau - tel +33 3 88 14 44 09 / fax +33 3 88 14 44 19




More information about the Pkg-samba-maint mailing list