force group with security=ads, winbind and local(NIS) groups
not working
Hansjörg Maurer
Hansjoerg.Maurer at dlr.de
Mon Mar 19 15:56:11 GMT 2007
an additional information
the errormessage on the XP-Client shows:
"the groupname could not be found"
(translated from german)
regards
Hansjörg
Hansjörg Maurer wrote:
> Hi
>
> I have updated a test system from 3.0.21b to 3.0.25pre1.
> The samba server is memeber of an AD-Domain, but all users/groups
> come from NIS.
> The system was referenced in the thread
> http://lists.samba.org/archive/samba-technical/2006-August/048681.html
> (New approach to "valid users" fix)
>
> Until 3.0.21b
> we where able to add a share with
> [TMP]
> path = /tmpdir
> force group = terrain
>
>
> and all files created there belong to group terrain
>
> Now with 3.0.25pre1and with the forcegroup I (domain-user maurer) do
> not even have access to the share
> even if the filesystem is granting access.
>
> drwxrwxrwx 2 root root 4096 19. Mar 16:02 tmpdir/
>
> [global]
> security = ADS
> workgroup = DOM
> realm = REALM
> encrypt passwords = yes
> netbios name = NAME
> winbind use default domain = Yes
> winbind trusted domains only = Yes
> idmap uid = 10000-10000
> idmap gid = 10000-10000
> client use spnego = yes
>
>
>
>
>
--
_________________________________________________________________
Deutsches Zentrum fuer Luft- und Raumfahrt e.V.
in der Helmholtz-Gemeinschaft
Institut fuer Robotik und Mechatronik
Dr. Hansjörg Maurer
LAN- und Systemmanager
Münchner Strasse 20
82234 Wessling
Germany
Telefon: 08153/28-2431
Telefax: 08153/28-1134
E-Mail: Hansjoerg.Maurer at dlr.de
Internet: http://www.robotic.dlr.de/
__________________________________________________________________
There are 10 types of people in this world,
those who understand binary and those who don't.
More information about the samba-technical
mailing list