[Samba] Using Domain Groups for share access control

[Brian Whitehead]

Yes you can use domain groups by using winbind.   There will probably be a
few quirks to work out and the documentation is rather lacking but it works
well.

--
Brian

----- Original Message -----
From: "dj" <dj at walhalla.sin.khk.be>
To: <samba at lists.samba.org>
Sent: Sunday, April 07, 2002 4:47 PM
Subject: [Samba] Using Domain Groups for share access control


> Hello everybody,
>
> I'm going to transfer a couple of Windows file/print server to a large
> Linux machine running Samba. I'm currently using a test system to figure
> out what works and what not. For the most part everything works fine. But
> I'm still left with a question I can't find a answer for.
>
> For easy administration, I will not be in charge of the admin only setup,
> I would like to control access to the shares using domain groups. The
> PDC/BDC machines will still be Windows.
>
> I'm a correct that you can't enter a domain group in the valid users
> group? Only unix groups?
>
> What is the easiest way to implement domain group based access control?
> I'm a right in thinking that this has to be done using winbind? Winbind
> will make unix groups out of the Windows groups wich I then can use for
> the valid/invalid users fields?
> And if I have to use winbind, is it already ok for use in larger
> environments?
>
> I know, thats a lot of questions, but I really would like to use Samba, so
> I really appreciate your help.
>
> Thanks,
> Tim Verhoeven
>
> --
>
============================================================================
==
> Tim Verhoeven
>                                Music Services - Michel Stoffels
> GSM : 0496 / 693 453                          + Deejayteam
> Email : dj at sin.khk.be                         + Sound & Light rentals
> URL : www.sin.khk.be/~dj/                     + P.A. services
> =========Public PGP-Key at :
http://www.sin.khk.be/~dj/publickey.txt==========
>           Member of Student Information Networking (www.sin.khk.be)
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>