domain groups information & observation

[Jeremy Allison]

Andrew Perrin - Demography wrote:
> 
> 1.) I'd be interested in any advice about using the domain groups stuff in
> smb.conf -- specifically, how to map a unix group to an nt group (even
> just unix:ntusers -> users and unix:ntadmins -> Administrators).  Has
> anyone successfully done this?
> 

That's something that needs work on in the code. It's on my
todo list but it may take a couple of weeks to get to it (I
need to fix the username map code first).

> 2.) After adding domain admins = <username list> to smb.conf, everyone in
> the list seems to have interchangeable profiles -- that is, if I do:
> domain admins = foo bar
> then login as foo and do something to my profile (say, copy something to
> the desktop), then log out and login as bar, the profile change takes
> effect for both, being copied into bar's profile directory.  This does not
> seem to happen for non-admin users, just within the admin group.  Is this
> normal or designed behavior?  It seems significantly different from
> NT-alone behavior, where multiple users are called Administrators and have
> their own profiles with Administrator permissions.
> 

Hmmmm. I'm not a profiles expert (but I know a man who is :-).

Luke ..... comments ?

Jeremy.

-- 
--------------------------------------------------------
Buying an operating system without source is like buying
a self-assembly Space Shuttle with no instructions.
--------------------------------------------------------