diff options
| -rw-r--r-- | docs/textdocs/GROUP-MAPPING-HOWTO.txt | 32 |
1 files changed, 7 insertions, 25 deletions
diff --git a/docs/textdocs/GROUP-MAPPING-HOWTO.txt b/docs/textdocs/GROUP-MAPPING-HOWTO.txt index 6bd29656af..c266f56548 100644 --- a/docs/textdocs/GROUP-MAPPING-HOWTO.txt +++ b/docs/textdocs/GROUP-MAPPING-HOWTO.txt @@ -37,32 +37,9 @@ want joe,john and mary, your entry in /etc/group will look like: domadm:x:502:joe,john,mary -3) map this domadm group to the 'domain admins' group: +3) map this domadm group to the 'domain admins' group by running the command: -3.1) lists all the mapped groups by running: smbgroupedit -v - you will get a list looking like the one below. - -NT group (SID) -> Unix group -System Operators (S-1-5-32-549) -> -1 -Replicators (S-1-5-32-552) -> -1 -Guests (S-1-5-32-546) -> -1 -Power Users (S-1-5-32-547) -> -1 -Print Operators (S-1-5-32-550) -> -1 -Administrators (S-1-5-32-544) -> -1 -Account Operators (S-1-5-32-548) -> -1 -Backup Operators (S-1-5-32-551) -> -1 -Users (S-1-5-32-545) -> -1 -Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> -1 -Domain Guests (S-1-5-21-1108995562-3116817432-1375597819-514) -> -1 -Domain Users (S-1-5-21-1108995562-3116817432-1375597819-513) -> -1 - -3.2) map the unix domadm group to the NT 'Domain Admins' group, by running the -command: - - smbgroupedit -c S-1-5-21-1108995562-3116817432-1375597819-512 -u domadm - -warning: don't copy and paste this sample, the Domain Admins SID (the -S-1-5-21-...-512) is different for every PDC. + smbgroupedit -c "Domain Admins" -u domadm you're set, joe, john and mary are domain administrators ! @@ -76,3 +53,8 @@ your samba PDC. Flag that group as a domain group by running: smbgroupedit -a unixgroup -td + +You can list the various groups in the mapping database like this + + smbgroupedit -v + |