[Samba] Domain Local Groups

[Tom Dickson]

If I have an NT Domain (MAIN) that has a one way trust to another domain
(SUB), and I define domain local groups on the domain SUB with members from
MAIN, can Samba 3.0 be made to see those groups? (Everything is NT only)

Or does it only work with 2000 AD Native mode?

ASCII ART:

------                    -----                ----------
|MAIN|=>=>=one=way=trust=>|SUB|================|Samba3.0|
------                    -----                ----------
  |                         \                          |
  MAIN\bob                   (G)SUB\DomainLocalGroup   |
  MAIN\tom                     |                       /
                               \MAIN\bob              /
                               \MAIN\tom             /
             _______________________________________/
            /
          (SMB.CONF)

[testshare]
valid users=SUB+DomainLocalGroup
write users=SUB+DomainLocalGroup

which should allow

MAIN+bob and MAIN+tom to write to the share.

Thank you!

-Tom

-----Original Message-----
From: Gerald (Jerry) Carter [mailto:jerry at samba.org]
Sent: Thursday, August 28, 2003 10:47 PM
To: Tom Dickson
Cc: samba mailing list
Subject: Re: [Samba] Domain Local Groups


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, 28 Aug 2003, Tom Dickson wrote:

> Does Samba 3.0 have support for "Domain Local Groups" when using NT auth?

Samba recognizes domain local groups when joined to an AD native mode
domain.




cheers, jerry
 ----------------------------------------------------------------------
 Hewlett-Packard            ------------------------- http://www.hp.com
 SAMBA Team                 ---------------------- http://www.samba.org
 GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."
                            --John Cusack - "Grosse Point Blank" (1997)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE/TujTIR7qMdg1EfYRAia/AJ0Ssxz+oRYSXCEdcUGp6LrisgfNegCfWJqW
mueBC1gTgp4nFMPh3H9ZuKo=
=9/35
-----END PGP SIGNATURE-----