[Samba] Re: Supplementary Group Issues

"Fenal, Jérôme" Jerome.Fenal at logicacmg.com
Tue Feb 24 15:49:00 GMT 2004

> -----Original Message-----
> From: Dmitry Monakhov
> To: Jérôme Fenal
> Cc: samba at lists.samba.org
> Sent: 2/24/2004 3:43 PM
> Subject: Re: [Samba] Re: Supplementary Group Issues
> Test user login name is ssi
> The output of id -a ssi command is
> uid=225(ssi) gid=1(other) groups=112(support),1000(users)
> Nevertheless samba has found only 1 group (gid=1)

Ok, I don't see anything beside the following :

Define the right suffixes and ous (should be People&Group in Solaris 9) :
  ldap suffix = o=ot.ru,o=ot
  ldap user suffix = ou=People
  ldap group suffix = ou=Group

Try to remove :
  ldap filter = (&(uid=%u)(objectclass=sambaSamAccount))
to get the default  : (uid=%u)

Also double check that the SID for your groups are derived from the domain's

Last thing, I remember having seen some problems with Solaris 9 nss_ldap
client due to Sun patches on the list this or last month. The bug seems to
be from Sun's fault. 
See :
and bug 395 (https://bugzilla.samba.org/show_bug.cgi?id=395).
Please test the program in comment #19 and report.



This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.

More information about the samba mailing list