Samba PDC: i can't create shares on win box
 

I'v set up samba (2.2.3 on RH7.3) as PDC, Windows set up for user level access. It works for the most part: on the win boxes i have domain logon and i can access directories on the samba box, profiles are stored there and i can update policies from there.
The usernames i have created in linux/samba are visible in Nexus Usermanager on the win box.

The problem is when i try to share a drive or directory on a windows box it tells me it "can't retrieve a list of users", so i can't create the share.

There's an issue i think might be related to this: when i login to a windows box , in the 'post-logon message' it says i have USER priveliges. I'm not sure if that means it thinks i am member of the group USER, but there is no such group on the samba box. I have made the username ("admin") member of the group "root" on the linux box.

I hate to say this, but something is probably wrong in your [global] section (smb.conf). Run through the samba.org how-to on domain controllers. Sharing the user-list is one of the core supported functions of Samba.

Good luck,
Gary Allen Vollink

Yeah i figured it must be something trivial i'm doing wrong.
Problem is that in the various howto's there is no actual mention of the configuration required for "retrieving a list of users" from pdc to a win client.
Thanks for your reply anyway.

have you added admin to the root group in the smbusers file?

yes admin is a member of root. that particular issue has been resolved in the mean time. i now get "administrator priveliges" when i logon to a client as either admin or root.

Also I now know the problem with the user list is not due to samba configuration, because one of the clients can retrieve a list of users and can create shares.
But i'm not sure where the problem is. of 3 clients i am using to test this, only one can retrieve the user list. i installed a whole bunch of patches on my own win95 box, without succes. (before this i had to install a patch to prevent bypassing domain logon by entering an invalid domainname).

in case anyone cares: the problem has been resolved.
it had to do with a wrong mapi32.dll.
this must be a fairly common problem with win9x clients, as the original mapi32 can get replaced by installation of an email client. it was easy to find info on this once i knew the exact (english) phrase of the error message: "cannot find list of users".
http://www.ust.hk/itsc/desktop/pc/wi...q/Q98T003.html

You know - I would have never guessed in a million years that it was something like this! Mapi32.dll is supposed to be for the E-mail (messaging) system!?

Educational as always.