[Samba] Secondary groups

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ron Garcia-Vidal wrote:
| I have backups of user home directories that I've shared out via samba
| so that my non-linux level 1 guy can restore files using the
| drag-n-drop.  Problem is, all directories are owned by their respective
| user and are set 700.  In order for the admin users to access these
| directories, I've set admin user=@SuperAdmins for the share in smb.conf.
|
| The problem is, al the admin users have domain users as their primary
| group, and superadmins as a secondary.  Access to the homes folder fails
| for all but user Administrator.  If I switch my primary group to
| SuperAdmins, I am allowed access.  I would rather not run with
| SuperAdmins as my primary group.  How can I get Samba to see my list of
| secondaries when determining access permission?
|
| I am running Debian testing with the stable samba 3.0 packages from
| samba.org.  Authentication is through winbind feeding off an NT4 pdc.

There are a couple of bug reports of this in bugzilla.

~  https://bugzilla.samba.org/show_bug.cgi?id=395

However, as yet I have been unable to reproduce these
(i spent some time on this before the release to
determine if it was a generic problem in our code).

It would help if you would grab a level 10 debug log
of the failure and send it to me off list.  Thanks.




cheers, jerry
~ ----------------------------------------------------------------------
~ Hewlett-Packard            ------------------------- http://www.hp.com
~ SAMBA Team                 ---------------------- http://www.samba.org
~ GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~                            --John Cusack - "Grosse Point Blank" (1997)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/fY/dIR7qMdg1EfYRAjkjAKDfSkicJSLPkALYCv7j75llqtSgggCgtqr6
gN3wD4alCHyLmjR3/1kofoo=
=i7DC
-----END PGP SIGNATURE-----