winbind users/group in smb.conf [was Re: [Samba] non-primary group permissions]

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Mike Dawson wrote:
| I can get rid of the problem it seems by setting:
| winbind use default domain = no
|
| There's a bugzilla entry here:
| https://bugzilla.samba.org/show_bug.cgi?id=336

Just to clarify, in Samba 3.0 we taking the position that
winbind users/groups in smb.conf must always be full
qualified.  So things like

	write list = +'Domain Admins'

will not work if what you really meant was

	write list = +'FOO\Domain Admins'

And the issue with secondary groups and 'winbind use default domain =
yes' is actually

	https://bugzilla.samba.org/show_bug.cgi?id=406

which has been fixed.



cheers, jerry

|> -----Original Message-----

|> I have a problem that if I set a file or directory group owner, users
|> that are members of this group can still not access it unless this is
|> their primary group.
|>
|> This is using samba 3.0rc3, all user and group info is coming from
|> winbind and permissions work as expected when using a linux shell but
|> not from a windows client.
|>
|> The problem goes away if I use the 'force group' option on the share,
|> but this still means that ony one group can be of any use for that
|> share.  Is this expected behaviour or is something going wrong?




~ ----------------------------------------------------------------------
~ Hewlett-Packard            ------------------------- http://www.hp.com
~ SAMBA Team                 ---------------------- http://www.samba.org
~ GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/0J7DIR7qMdg1EfYRAkD8AJ9a4Sdj/Lk8hJHRlAo4k3uo9hyZTgCgoZ+N
Lqi65qPQ9f+9mGnZNAWxi1s=
=K/8M
-----END PGP SIGNATURE-----