[Samba] Samba can't find my @groups

[John H Terpstra]

On Mon, 7 Jul 2003, [iso-8859-1] Örjan Persson wrote:

> Hello!
>
> I've installed Samba as a PDC and followed all
> documentations I've found helpful on the internet!
>
> It looks like everything runs nicely now on my
> Debian server with Linux 2.4.21 and Samba 3.0beta1
> except when it comes to groups.
>
> I have i.e. the following share:
> [Learning]
>         path = /home/share/learning
>         write list = @personal, @admin, @installer
>         force group = @personal

Change this to:
	force group = personal

You are trying to get the forced group to be the contents of the group
personal, when what this directive can do it to set the group to the group
personal. You want the group id, not the ids of all the members of the
group.

- John T.

>         force create mode = 0664
>         force directory mode = 0775
>
> The groups are added to my /etc/group and they should
> be ok. I've also tried to add them using the net command:
>
> $ net groupmap list
> System Operators (S-1-5-32-549) -> admin
> Replicators (S-1-5-32-552) -> daemon
> Guests (S-1-5-32-546) -> -1
> elev (S-1-5-21-4126613232-4110127252-2813475210-1002) -> elev
> Domain Guests (S-1-5-21-4126613232-4110127252-2813475210-514) -> -1
> Domain Admins (S-1-5-21-4126613232-4110127252-2813475210-512) -> admin
> Domain Admins (S-1-5-21-3385878057-2215354411-2021536684-512) -> -1
> Power Users (S-1-5-32-547) -> sys
> Domain Guests (S-1-5-21-3385878057-2215354411-2021536684-514) -> -1
> personal (S-1-5-21-4126613232-4110127252-2813475210-1003) -> personal
> Print Operators (S-1-5-32-550) -> lp
> Administrators (S-1-5-32-544) -> admin
> installer (S-1-5-21-4126613232-4110127252-2813475210-1004) -> installer
> Account Operators (S-1-5-32-548) -> admin
> admin (S-1-5-21-4126613232-4110127252-2813475210-1005) -> admin
> Domain Users (S-1-5-21-4126613232-4110127252-2813475210-513) -> elev
> Domain Users (S-1-5-21-3385878057-2215354411-2021536684-513) -> -1
> Backup Operators (S-1-5-32-551) -> bin
> Users (S-1-5-32-545) -> elev
>
> And the /etc/group looks like this:
> personal:x:1003:installer,testadmin
>
> If I try to connect using the smbclient I get
> the respons:
> "tree connect failed: NT_STATUS_NO_SUCH_GROUP"
>
> Here is some of the logs of the log.smbd.
> [2003/07/07 10:37:36, 1] sam/idmap_tdb.c:db_idmap_init(319)
>   idmap uid range missing or invalid
>   idmap will be unable to map foreign SIDs
> [2003/07/07 10:37:36, 1] sam/idmap_tdb.c:db_idmap_init(331)
>   idmap gid range missing or invalid
>   idmap will be unable to map foreign SIDs
> [2003/07/07 10:37:36, 3] param/loadparm.c:lp_load(3851)
>   lp_load: refreshing parameters
> [2003/07/07 10:37:36, 3] param/loadparm.c:init_globals(1274)
>   Initialising global parameters
> [2003/07/07 10:37:36, 3] param/params.c:pm_process(566)
>   params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
> [2003/07/07 10:37:36, 3] param/loadparm.c:do_section(3367)
>   Processing section "[global]"
> [2003/07/07 10:37:38, 1] smbd/service.c:make_connection_snum(521)
>   Couldn't find group @personal
>
> I'm not using LDAP or the like, only plain unix
> password and group files. Maybe I should?
>
> Do anyone know what I am doing wrong? If you'd
> want to see my whole smb.conf I've temporarly
> added it here:
>   - http://80.88.100.15/~orange/smb.conf
>
> Cheers,
> 	Örjan
>

-- 
John H Terpstra
Email: jht at samba.org