[Samba] Re: Mapping ADS groups

[Igor Belyi]

Greg Adams wrote:
> I've got a Samba 3.0.7 member server of an ADS domain. Is there some
> way to map everyone in an ADS group to a single user for the purposes
> of Unix permissions? I thought I could do this with an smb.conf entry
> of:
> usernam map = /opt/samba/etc/username.map
> 
> and an entry in the username map of
> smbuser = @"DOMAIN\Group Name"

I know it's not obvious, but looking at the code it looks like just 
plain 'smbuser = "DOMAIN\Group Name" should work. '@' can be used only 
for UNIX groups.

Hope it helps,
Igor

> but that doesn't seem to do it. Using a username map entry of
> smbuser = "DOMAIN\User ID"
> works, but the ADS domain has over 10000 users in the target group I
> need to map, and I don't want to elaborate each of those users in the
> username map.