[Samba] Domain Group Permissions

[Scott Moseman]

Yup, the "Primary Group" setting was the problem.
I had no idea Samba was going to work in that way.

Does anyone know the workaround?  Because if I am
going to need to use Primary Groups only, my Samba
installation is going to be very short-lived...

Thanks,
Scott Moseman



-----Original Message-----
From: David Nalley [mailto:davidnalley at BryanRamey.com] 
Sent: Monday, March 29, 2004 2:44 PM
To: Scott Moseman
Subject: RE: [Samba] Domain Group Permissions


Is Accounting the primary group?? 
If not, that's the problem, though I understand there
is a workaround.....I have seen the workaround, just
don't remember what it is. 


> -----Original Message-----
> From: Scott Moseman [mailto:smoseman at novolink.net] 
> Sent: Monday, March 29, 2004 3:25 PM
> To: samba at lists.samba.org
> Subject: [Samba] Domain Group Permissions
> 
> 
> Re: Fedora + Samba 3.0.2a, Win 2003 + AD Domain
> 
> [Accounting]
>  comment = Accounting
>  path = /shares/accounting
>  valid users = @"Accounting"
> 
> With "Accounting" being an Active Directory domain group.
> "wbinfo -g" and "getent group" both show all my AD groups.
> 
> If I change to "valid users = smoseman", it will validate 
> against my AD account.  But it does not want to do groups.
> 
> Is my syntax wrong?  I tried several other variations with 
> same results.  @Accounting, @DOMAIN\Accounting, and so on.
>