samba allways expand nested groups

joris.weijters at lekkerland.nl joris.weijters at lekkerland.nl
Wed Feb 23 06:21:25 MST 2011


I have a samba 3.5.6 connected to a windows 2008R2 Active directory
handeling a lot of groups.
We tried to tidy up these groups using nested groups, however it looks like
Samba/winbind allways expands the nested groups.
why is this happening?

This is the global part of my smb.conf ( adjusted for domain name and
IP-adres)


[global]
# ADS

        security = ads
        realm = DOMAIN.LOCAL
        password server = 123.123.123.123
        workgroup = DOMAIN
        client use spnego = yes
        client ntlmv2 auth = yes
        encrypt passwords = yes
        unix extensions = no
        follow symlinks = yes
        wide links = yes


# WINBIND
        winbind separator = +
        winbind normalize names = yes
        idmap uid = 10001-30000
        idmap gid = 10001-30000
        winbind enum users = yes
        winbind enum group = yes
        winbind use default domain = yes
        winbind nested groups = no
        hide special files = Yes
        template homedir = /usrdata/home/%U
        template shell = /usr/bin/ksh
        load printers = No

# LOGGING
        max log size = 10000
        loglevel = 5

# NETWORK
        bind interfaces only = Yes
        interfaces = 123.0.0.0/8 127.0.0.1
        socket address = 123.123.123.123





More information about the samba-technical mailing list