new smb.conf option

[Cole, Timothy D.]

> -----Original Message-----
> From:	Jean Francois Micouleau [SMTP:Jean-Francois.Micouleau at dalalu.fr]
> Sent:	Friday, October 06, 2000 17:50
> To:	Gerald Carter
> Cc:	Jeremy Allison; samba-technical at samba.org
> Subject:	Re: new smb.conf option
> 
> 
> On Fri, 6 Oct 2000, Gerald Carter wrote:
> 
> > Is this option for a PDC, a Samba member server, or should 
> > it apply to both?
> 
> only PDC.
> 
> > If we are only talking a a member server, then the only
> > domain accounts should be defined by the PDC.  In this 
> > case, then the UNIX groups on the Samba member server 
> > should be mapped to the NT domain groups.
> > 
> > If we are talking about a PDC, then I don't see the use
> > for local groups at all on a Samba box.  I'm having deja-vu
> > here, guys....
> 
> you don't want to show all your unix groups as domain groups ? Do you ?
> 
	Perhaps it might be more appropriate have the option specify which
groups are _not_ domain groups?  

	Looking at the box here, probably everything above gid 1000 (all but
about 10 or 12 groups) would be most appropriate at a domain group.

	Of course, this does raise the question as to whether -- in the long
term -- there's not a better way of making this distinction.