new smb.conf option

Cole, Timothy D. timothy_d_cole at
Fri Oct 6 22:10:53 GMT 2000

> -----Original Message-----
> From:	Jean Francois Micouleau [SMTP:Jean-Francois.Micouleau at]
> Sent:	Friday, October 06, 2000 17:50
> To:	Gerald Carter
> Cc:	Jeremy Allison; samba-technical at
> Subject:	Re: new smb.conf option
> On Fri, 6 Oct 2000, Gerald Carter wrote:
> > Is this option for a PDC, a Samba member server, or should 
> > it apply to both?
> only PDC.
> > If we are only talking a a member server, then the only
> > domain accounts should be defined by the PDC.  In this 
> > case, then the UNIX groups on the Samba member server 
> > should be mapped to the NT domain groups.
> > 
> > If we are talking about a PDC, then I don't see the use
> > for local groups at all on a Samba box.  I'm having deja-vu
> > here, guys....
> you don't want to show all your unix groups as domain groups ? Do you ?
	Perhaps it might be more appropriate have the option specify which
groups are _not_ domain groups?  

	Looking at the box here, probably everything above gid 1000 (all but
about 10 or 12 groups) would be most appropriate at a domain group.

	Of course, this does raise the question as to whether -- in the long
term -- there's not a better way of making this distinction.

More information about the samba-technical mailing list