#42548 - 2003-07-08 05:24 PM
Throwing in the towel, what version do I need...
|
samd
Fresh Scripter
Registered: 2002-12-03
Posts: 19
|
I have been struggling to get the ingroup statement to work for a while now and am at the end of my rope. I have read many postings about the topic and there has been some talk as to how the user's credentials are accessed and how it has changed in recent versions. Is there anyone who can shed some light on this so that I can load an older version which from my understanding will probably work. Thanks
Sam
|
|
Top
|
|
|
|
#42551 - 2003-07-08 05:41 PM
Re: Throwing in the towel, what version do I need...
|
Kdyer
KiX Supporter
Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
|
Maybe also show us some code?
Kent
|
|
Top
|
|
|
|
|
#42552 - 2003-07-08 06:57 PM
Re: Throwing in the towel, what version do I need...
|
samd
Fresh Scripter
Registered: 2002-12-03
Posts: 19
|
Well here's the info, it's all of the important stuff, I appreciate any feedback. I have set up Kixtart many times and never had any issues until now:
- I tried every type of listing ie \\servername\share, domainname\server name\share
- Everything else I do works perfect. I have a combination of win98 and w2k (tried on both), a w2k native mode domain.
- all of the dll's are in the scripts folder and the service is loaded on all DC's
- when I run in debug mode it reads the if statement but does not execute the then even if the user is in the group
- I have tried to follow the great information from this link but with no luck http://www.kixtart.org/board/ultimatebb.php?ubb=get_topic;f=2;t=002804#000000
- And please read the excerpt after the script, I found that in another posting, it is what precipitated me thinking an older version will work.
SCRIPT START HERE
;----- Common variables
$x="$$"
$user="@userid"
;----- HS Variables
$hs01="\\hs01\"
$hs02="\\hs02\"
$ho03="\\hs03\"
$hsfol="cc40"
;----- Set home drive variable (will add ingroup/subnet later for location)
$hshome=$hs01+$user+$x
$hsfollet=$hs01+$hsfol+$x
;----- Map home drive
$drname = "u:"
$shname = $hshome
gosub mapdr
;----- Follet mappings
If ingroup("HSFollet")
$drname = "z:"
$shname = $hsfollet
gosub mapdr
endif
;----- End of script
exit
;----- Drive deletion, mapping and error checking
:mapdr
? "Mapping " + $drname
use $drname /delete /persistent
use $drname $shname
if @error <> 0
? " " + $shname + " " + @serror
sleep 2
else
" (complete)"
endif
SCRIPT ENDS HERE
OTHER INFO I FOUND:
I believe that there is no problem with these functions INGROUP and ENUMGROUP in Kixtart 4.0x. Confusion within our test community occurred because the behavior of 3.62 and 4.01 were different. This behavior most likely is by design and I would like confirmation of that if possible.
The tests we conducted today involved altering group names via Perl and altering group memberships for NT4 User Manager and then executing Kix32 3.62 and 4.01 using the INGROUP and ENUMGROUP. Kix 4.01 must reference the global groups that are tagged to the users security token and not interrogate the domain SAM. Kix 3.62 on the hand reflected these changes immediately and therefore must have been accessing current data from the SAM.
During further testing, I deleted my self from a group and execute the test script again under both versions. Again 3.62 showed the current state of my membership. but 4.01 returned that I was still a member of the group. At that point I realized what must be happening. After logging off and back on Kix 4.01 produced the expected results.
I verified this by open a DOS window in my current session and executing the script. the results stated that I was NOT a member of global group XYZ. I then added my account to group XYZ and synced the domain. Executing the script still resulted in my account not being in the group. In the same window Kixtart 3.62 showed correctly that the account was indeed a member. I then opened a new DOS windows using the "run as" function and the same account as my original session. Executing the test.kix script using Kix 4.01 showed that the account was a member of group XYZ. Back to the original window and the account is NOT a member.
I think that the documentation should clearly reflect that the SAM is not being accessed to determine group membership and the static global group memberships associated with the security token is being referenced.
Thank you to all those that responded. Sorry for the false alarm
|
|
Top
|
|
|
|
|
#42553 - 2003-07-08 06:59 PM
Re: Throwing in the towel, what version do I need...
|
Radimus
Moderator
Registered: 2000-01-06
Posts: 5187
Loc: Tampa, FL
|
have you tried kix32.exe /f?
in kix 4.x
[ 08. July 2003, 19:02: Message edited by: Radimus ]
|
|
Top
|
|
|
|
|
#42556 - 2003-07-08 07:31 PM
Re: Throwing in the towel, what version do I need...
|
Howard Bullock
KiX Supporter
Registered: 2000-09-15
Posts: 5809
Loc: Harrisburg, PA USA
|
|
|
Top
|
|
|
|
|
#42557 - 2003-07-09 04:18 PM
Re: Throwing in the towel, what version do I need...
|
samd
Fresh Scripter
Registered: 2002-12-03
Posts: 19
|
The /f is not making a difference still no go. I have been reading all of the great links you guys have referenced but still no go. I am going to try 3.62 to see what happens.
|
|
Top
|
|
|
|
Moderator: Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart
|
1 registered
(Allen)
and 581 anonymous users online.
|
|
|
