Samba TNG FAQ updated

Paul J Collins pjdc at
Thu Apr 27 20:28:16 GMT 2000

>>>>> "Kevin" == Kevin Colby <kevinc at> writes:

    Kevin> Maybe it's just me, but you lost me here.  Your statements
    Kevin> seem to contradict each other.  Why do you think this is
    Kevin> not needed?  Paragraphs 2 and down seem to indicate it _is_
    Kevin> needed.

It's not needed on Samba domain controllers.  Since Unix can't nest
groups, it would be tricky anyway.

It *is* needed on domain members, but only NT ones, because it is how
the user rights get granted to the domain users, etc.  Samba does not
have to do *anything* for it to work.  All it has to do is provide the
global groups, which it does.

To see what I mean, log onto an NT workstation and open User Manager.
Examine the local groups that are granted the right "Log on locally".
Examine the global groups that are members of those local groups.


Paul Collins <sneakums at> - - - - - [ A&P,a&f ]
 GPG: 0A49 49A9 2932 0EE5 89B2  9EE0 3B65 7154 8131 1BCD
 PGP: 88BA 2393 8E3C CECF E43A  44B4 0766 DD71 04E5 962C
"Linux: it's just this operating system, you know?"

More information about the samba-ntdom mailing list