Using Local Groups with AD Domain Users for Samba Shares

Andreas Schneider asn at
Fri Oct 26 07:42:24 MDT 2012

On Friday 19 October 2012 12:39:07 Marko Myllynen wrote:
> Hi,


> in Samba 4 the "security = server" mode was removed making it a hard
> requirement to use "security = ads" in AD environments to allow users to
> access Samba shares with their AD username/password. While the server
> mode had many problems [1] it allowed administrators to use local/NSS
> groups to control access to shares while still allowing users to
> authenticate with their AD username/password.

net sam createlocalgroup wurst
net addmem wurst SAMBA\asn

	valid users = @wurst

	-- andreas

Andreas Schneider                   GPG-ID: F33E3FC6
Samba Team                             asn at

More information about the samba-technical mailing list