[Samba] Valid users question

[mike andrewjeski]

Hmm,

I'm having the same problem, and the quotes don't help.

I'm running 3.0.4 on RedHat with winbind & pam. Even set up /etc/pam.d/login 
per the docs.

please help

Mario


Hi, this worked for me:


valid users = '@DOMAINNAME\GROUP'

in my smb.conf I have valid users = '@DOMAINNAME\Domain Users' and I mapped
'Domain Users' to unixgroup domusers.

Hope this helps

Ciao







At 01:05 21/05/2004, Michael Andrewjeski wrote:

>Hi,
>
>I've a question about the syntax of the valid users option. Any help is 
>greatly appreciated!
>
>Here is the Background:
>
>samba 3.0.4
>Linux as Domain Member
>Active Directory, not in Native Mode
>Compiler opions: --with-winbind --with-pam --with-smbmount
>
>The goal is to authenticate via the Windows Domain and allow access via 
>Windows groups.
>
>The syntax in my smb.conf looks like this:
>
>valid users = DOMAIN\SOMEGROUP
>
>However, it doesn't work no matter what.
>
>I can authenticate individual users thusly:
>
>valid users = DOMAIN\SOMEUSER
>
>I've read about the "@" "+" and "&"  syntax, but they only seem to 
>represent Unix & Nis groups.
>
>Is there another way to represent Windows groups? Or is my config the 
>culprit? Here's the conf file:
>
>  smb.conf:
>
>[global]
>
># workgroup = NT-Domain-Name or Workgroup-Name
>workgroup = DOMAIN
>
># WINS service
>winbind uid = 10000-20000
>winbind gid = 10000-20000
>winbind enum users = yes
>winbind enum groups = yes
>wins server = XXX.XXX.XXX.XXX
>
>password server = *
>
>server string = SAMBA
>
>log file = /var/log/samba/%m.log
>max log size = 0
>log level =  10
>
>security = domain
>
>auth methods = guest sam ntdomain
>
>
>
>encrypt passwords = yes
>
>local master = no
>
>dns proxy = no
>
>[SOMESHARE]
>    comment = Some Share
>    path = /d1/articles
>    public = no
>    writable = yes
>    printable = no
>    valid users = DOMAIN\SOMEGROUP
>
>--
>To unsubscribe from this list go to the following URL and read the
>instructions:  http://lists.samba.org/mailman/listinfo/samba




--
Email.it, the professional e-mail, gratis per te: http://www.email.it/f

Sponsor:

Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=&d=21-5
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

_________________________________________________________________
Best Restaurant Giveaway Ever! Vote for your favorites for a chance to win 
$1 million! http://local.msn.com/special/giveaway.asp