Administrace komentářů

Asi jsem na to prisel..

v praci mi to ted delalo to same po 5 hodinach to uz chodi..

problem je v tom ze samba verze 3 pouziva navic mapovani skupin uzivatelu unix vs win... a jeste to kombinuje s prislusnym SID domeny..

neboli

$ net getlocalsid

vipise aktualni SID (asi unikatni cislo domeny)

viz.

SID for domain KISERVER is: S-1-5-21-346180732-2709176448-1934373500

a pod timto cislem musis namapovat skupiny (unix) na win aby se mohla prihlasit do domeny

$ net groupmap modify ntgroup="Domain Admins" unixgroup=users

viz.

$ net groupmap list

System Operators (S-1-5-32-549) -> -1

Replicators (S-1-5-32-552) -> -1

Guests (S-1-5-32-546) -> -1

Domain Admins (S-1-5-21-346180732-2709176448-1934373500-512) -> users

Power Users (S-1-5-32-547) -> users

Domain Guests (S-1-5-21-346180732-2709176448-1934373500-514) -> -1

Domain Users (S-1-5-21-346180732-2709176448-1934373500-513) -> -1

Print Operators (S-1-5-32-550) -> -1

Administrators (S-1-5-32-544) -> users

Account Operators (S-1-5-32-548) -> -1

Domain Users (S-1-5-21-1497421996-2555894740-436779440-513) -> -1

Domain Admins (S-1-5-21-1497421996-2555894740-436779440-512) -> -1

Backup Operators (S-1-5-32-551) -> -1

Domain Guests (S-1-5-21-1497421996-2555894740-436779440-514) -> -1

Users (S-1-5-32-545) -> -1

bohuzel nemel jsem cas zjistovat ktera skupina se jak chova..mapuju vsechny na "Domain Admins" u tech mi to chodi i kdyz z hlediska zabezpeceni to je asi

pekna ...

S pozdravem MMart