[Samba] LDAP Supplementary Groups not recognised

[Malcolm Gibbs]

Jerry,

The same supplementary group works fine when used
in /etc/password for a Solaris User.

If you put the supplementary group in /etc/group 
and make the SAMBA user a member this works fine.

If you make the sambaAccount gidNumber the
supplementary group (so now the primary group) this
also works.
 
It is as if SAMBA is never looking for any
supplementary LDAP
posixGroups when attempting the directory open.

Thanks
Malcolm

----- Original Message -----
From: "Gerald (Jerry) Carter" <jerry at samba.org>
Date: Sunday, April 6, 2003 2:09 am
Subject: Re: [Samba] LDAP Supplementary Groups not
recognised

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On Sat, 5 Apr 2003, Malcolm Gibbs wrote:
> 
> > Yes what is fustrating is that supplementary
LDAP groups are working
> > fine from the Solaris shell, it is only SAMBA
that appears to be
> > ignoring them.
> > 
> > Do posixGroup entries have to have any
additional attributes or 
> be in a 
> > particular base to be recognised by SAMBA,
Solaris 9 by default 
> puts 
> > them in ou=group,dc=xx,dc=com.
> 
> I don't think this is related to LDAP.  Can you
test using a 
> standard 
> /etc/passwd file and see if you get the same
behavior.   I've got 
> unconfirmed reports of a possible generic bug in
this area.
> 
> 
> 
> 
> cheers, jerry
>
-------------------------------------------------------------------
> ---
> Hewlett-Packard            ------------------------- 
> http://www.hp.com SAMBA Team                
---------------------- 
> http://www.samba.org GnuPG Key                  ---- 
> http://www.plainjoe.org/gpg_public.asc "You can
never go home 
> again, Oatman, but I guess you can shop there."  
>                            --John Cusack - "Grosse
Point Blank" 
> (1997)
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.0 (GNU/Linux)
> Comment: For info see
http://quantumlab.net/pine_privacy_guard/
> 
>
iD8DBQE+juOvIR7qMdg1EfYRAi3MAKCozIM5aQMrWx0L6wfFJZDe0/PXvQCgzwiH
> /FeyoIcmzqGj78WgdQ8rybY=
> =yMVB
> -----END PGP SIGNATURE-----
> 
>