[Samba] [Security] Valid Users fails

[Michael Gasch]

hi at all

i tried to restrict access on some shares on my Samba 3.0 PDC via "valid 
  users" entry in smb.conf

-- snip --

[board]
valid users = @users

-- snip --

net groupmap list shows, that

Domain-Users is mapped to users

but if i try to access this restricted share as user from @users-group, 
access is denied, too

without "valid users = @users" everything works fine
i think the problem is here (debuglevel 10)

-- snip --

[2003/11/26 16:00:01, 5] smbd/uid.c:change_to_root_user(218)
   change_to_root_user: now uid=(0,0) gid=(0,0)
[2003/11/26 16:00:01, 4] smbd/reply.c:reply_tcon_and_X(266)
   Client requested device type [?????] for share [BOARD]
[2003/11/26 16:00:01, 5] smbd/service.c:make_connection(862)
   making a connection to 'normal' service board
[2003/11/26 16:00:01, 5] lib/username.c:user_in_netgroup_list(312)
   looking for user img of domain  in netgroup users
[2003/11/26 16:00:01, 5] lib/username.c:user_in_netgroup_list(314)
   innetgr is FALSE
[2003/11/26 16:00:01, 5] lib/username.c:user_in_netgroup_list(312)
   looking for user img of domain  in netgroup Domänen-Benutzer
[2003/11/26 16:00:01, 5] lib/username.c:user_in_netgroup_list(314)
   innetgr is FALSE
[2003/11/26 16:00:01, 2] smbd/service.c:make_connection_snum(384)
   user 'img' (from session setup) not permitted to access this share 
(board)
[2003/11/26 16:00:01, 3] smbd/error.c:error_packet(113)
   error packet at smbd/reply.c(274) cmd=117 (SMBtconX) 
NT_STATUS_ACCESS_DENIED

-- snip -- (do you need more output?)

no domain (TESTEVAN) is given, so this could be the problem ?!?!
i also tried

TESTEVAN\img

without success
as i already said: everything works in my domain with samba 3.0, but 
when i try "valid users" it stops working :/

plz help

thx in advance
-- 


          "Matrix - more than a vision"

**************************************************
Michael Gasch
Max Planck Institute for Evolutionary Anthropology
Deutscher Platz 6
04103 Leipzig

Germany
**************************************************