localzuk Posted February 9, 2007 Posted February 9, 2007 I have a new linux machine set up and it is joined to the domain. I want to enable a map so that the local 'adm' group on the linux machine contains the 'Domain Admins' group of the AD. Does anyone know how to do this?
localzuk Posted February 9, 2007 Author Posted February 9, 2007 And, to answer my own question. You use 'net group add/modify'. And on Ubuntu group maps are already set up but are set to null (so Domain Admins -> -1) so you have to use 'net group modify ntgroup="Domain Admins" unixgroup=blah.
localzuk Posted February 9, 2007 Author Posted February 9, 2007 Well I seem to have a problem. I am trying to set up CUPS + Samba (and eventually pykota). I have the machine joined to the domain fine, I have used the net group modify command to map Domain Admins -> adm etc... but when I set up the samba print$ share (per http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/CUPS-printing.html) I add @adm as a write list member for the share and also @adm as 'printer admin' in the [printers] share details. When I try and follow the instructions for adding drivers to the share via the windows method, the driver list is empty and the 'Add Driver' button greyed out. I am guessing that this is due to the group mappings not working properly. Any advice?
webman Posted February 9, 2007 Posted February 9, 2007 Can you not just give write to @"Domain Admins" instead of adm?
localzuk Posted February 9, 2007 Author Posted February 9, 2007 hmm... I hadn't tried it without the domain in front of it. I'll try and see.
webman Posted February 9, 2007 Posted February 9, 2007 If getent passwd and getent group include domain users and groups, then I don't see why it shouldn't work.
localzuk Posted February 9, 2007 Author Posted February 9, 2007 Tried it and it still doesn't work. Any other ideas?
webman Posted February 9, 2007 Posted February 9, 2007 I presume you've tried the usual wbinfo with '-u', '-g' and '-a user%pass' to test everything's working?
localzuk Posted February 9, 2007 Author Posted February 9, 2007 Yep. getent works fine. I have the full lists working. And the wbinfo is working fine too. All the authentication stuff works fine, it just seems to be the use of iit for checking share permissions.
Geoff Posted February 9, 2007 Posted February 9, 2007 you need to use 'net groupmap' to associate the correct SSID for Domain Admins with a local unix group.
localzuk Posted February 9, 2007 Author Posted February 9, 2007 I already have done that... (I mistyped my earlier message). I have Domain Admins -> adm, Domain users -> users and Domain Guests -> nobody.
SimpleSi Posted February 9, 2007 Posted February 9, 2007 Maybe of no help at all but I can't get proper adminstrative remote control of my Ubuntu/CUPS/Samba printerserver and thats on a peer to peer network with no security at all. I believe that CUPS adminstration is broken on Ubuntu due to philosphicall differences (eg geek war) in the community. This info is 4 months old so maybe things have changed? regards Simon
Geoff Posted February 9, 2007 Posted February 9, 2007 I think that deserves a separate thread SimpleSi.
SimpleSi Posted February 10, 2007 Posted February 10, 2007 @geoff - not looking for any help - just saying I believe CUPS adminstration is broken under Ubunutu and maybe that's why options are greyed out and not actually a permissions problem. regards Simon
localzuk Posted February 10, 2007 Author Posted February 10, 2007 I think I'll go over to the ubuntu forums site and post about it.
Geoff Posted February 10, 2007 Posted February 10, 2007 @geoff - not looking for any help - just saying I believe CUPS adminstration is broken under Ubunutu and maybe that's why options are greyed out and not actually a permissions problem. regards Simon you just need to alter the cupsd.conf to enable remote administration.
localzuk Posted February 10, 2007 Author Posted February 10, 2007 ah, got confused by that. Yeah. I've got the cups webadmin stuff enabled already - the ubuntu wiki already covers that.
SimpleSi Posted February 10, 2007 Posted February 10, 2007 you just need to alter the cupsd.conf to enable remote administration. I'd didn't realise it was that simple. What/where do I need to change? regards Simon
localzuk Posted February 10, 2007 Author Posted February 10, 2007 Take a look at https://help.ubuntu.com/community/HOWTO-enable-cups-browsing You need to run the enable_browsing and enable_sharing commands. You also need to alter the cupsd.conf file to allow access from the workstation that you want (they are htaccess style sections).
SimpleSi Posted February 10, 2007 Posted February 10, 2007 Ta Was that causing you your problems as well? regards Simon
localzuk Posted February 10, 2007 Author Posted February 10, 2007 No. This is a separate issue - My issue is with Samba and setting up the auto-install of drivers. It is separate to the cups issue.
Ric_ Posted February 11, 2007 Posted February 11, 2007 @localzuk: What error messages are you getting? I had a problem like this initially, however I had forgotten to give the necessary access to the /etc/samba/drivers directory IIRC. If it isn't working for 'administrator', try running it with the -U root switch instead.
localzuk Posted February 11, 2007 Author Posted February 11, 2007 I don't quite understand what you mean Ric_. I'm not getting any error messages. The 'Add Driver' button is simply greyed out. I have set print$ to /home/drivers and it currently is world read+writable. I am adding the drivers from Windows (or trying to) via the method described in chapter 21 of the samba tutorial at samba.org.
Ric_ Posted February 11, 2007 Posted February 11, 2007 I thought that you were using the cupsaddsmb command. Check out the man page at http://www.cups.org/doc-1.2/man-cupsaddsmb.html
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now