force group with security=ads, winbind and local(NIS) groups not working

Hansjörg Maurer Hansjoerg.Maurer at dlr.de
Mon Mar 19 15:56:11 GMT 2007


an additional information
the errormessage on the XP-Client shows:
"the groupname could not be found"
(translated from german)

regards

Hansjörg



Hansjörg Maurer wrote:
> Hi
>
> I have updated a test system from 3.0.21b to 3.0.25pre1.
> The samba server is memeber of an AD-Domain, but all users/groups
> come from NIS.
> The system was referenced in the thread
> http://lists.samba.org/archive/samba-technical/2006-August/048681.html
> (New approach to "valid users" fix)
>
> Until 3.0.21b
> we where able to add a share with
> [TMP]
>     path = /tmpdir
>    force group = terrain
>  
>  
> and all files created there belong to group terrain
>
> Now with 3.0.25pre1and  with the forcegroup I (domain-user maurer) do
> not even have access to the share
> even if the filesystem is granting access.
>
> drwxrwxrwx    2 root     root         4096 19. Mar 16:02 tmpdir/
>
> [global]
> security = ADS
> workgroup = DOM
> realm = REALM
> encrypt passwords = yes
> netbios name = NAME
> winbind use default domain = Yes
> winbind trusted domains only = Yes
> idmap uid = 10000-10000
> idmap gid = 10000-10000
> client use spnego = yes
>
>
>
>
>   

-- 
_________________________________________________________________

Deutsches Zentrum fuer Luft- und Raumfahrt e.V.
in der Helmholtz-Gemeinschaft

Institut fuer Robotik und Mechatronik

Dr. Hansjörg Maurer

LAN- und Systemmanager

Münchner Strasse 20
82234 Wessling
Germany 

Telefon: 08153/28-2431 
Telefax: 08153/28-1134

E-Mail: Hansjoerg.Maurer at dlr.de
Internet: http://www.robotic.dlr.de/

__________________________________________________________________


There are 10 types of people in this world, 
those who understand binary and those who don't.



More information about the samba-technical mailing list