[Samba] share access problem with %G

[Jacky Chan]

Hi,

I learning samba on SUSE 9.3 linux box. I followed the Samba "Small Office
Networking" example to configure the server, but I have problem to access
the share "accounts" / finsvcs until I changed the valid users from %G to
@acctsdep.

Here are the output from the console when I accessing the share "accounts"

server01:~ # smbclient //server01/accounts -U jackyacct
Password:
Domain=[DOMAIN00] OS=[Unix] Server=[Samba 3.0.13-1.3-SUSE]
tree connect failed: NT_STATUS_ACCESS_DENIED

Could anyone tell me what I missed or I must setup the "valid users" using
@UNIX-GROUP ?

[global]
        workgroup = DOMAIN00
        server string = SERVER01
        map to guest = Bad User
        passwd program = /usr/bin/passwd %u
        username map = /etc/samba/smbusers
        #passwd chat = *New*Password* %n\n*Re-enter*new*password* %n\n
*Password*changed*
        add user script = /usr/sbin/useradd -m '%u'
        delete user script = /usr/sbin/userdel -r '%u'
        add group script = /usr/sbin/groupadd '%g'
        delete group script = /usr/sbin/groupdel '%g'
        add user to group script = /usr/sbin/usermod -G '%g' '%u'
        force create mode = 0660
        force directory mode = 0770
        unix password sync = Yes
        printcap cache time = 750
        printcap name = cups
        add machine script = /usr/sbin/useradd  -c "Machine Trust Account"
-d /var/lib/nobody -s /bin/false %m$
        logon script = %u.bat
        logon path = \\%L\profiles\.msprofile<file://%25L/profiles/.msprofile>
        logon drive = P:
        #logon home = \\%L\%U\.9xprofile <file://%25L/%25U/.9xprofile>
        domain logons = Yes
        os level = 65
        preferred master = Yes
        domain master = Yes
        wins support = Yes
        ldap ssl = no
        printer admin = @ntadmin, root, administrator
        cups options = raw
        local master = Yes
        security = user

[accounts]
comment = Accounting Files
path = /data/accounts
#valid users = @acctsdep
valid users = %g
read only = No

[finsvcs]
comment = Financial Service Files
path = /data/finsvcs
valid users = %G
read only = No