[Samba] Does Samba/Winbind not follow nested groups in AD?!?

[James A. Dinkel]

> -----Original Message-----
> From: Aaron Kincer
> 
> James,
> 
> You are correct--I don't have windbind nested groups = yes set in my
> smb.conf. Yes, default 3.0.22. I followed the Ubuntu configuration
> instructions to the letter found in the Ubuntu forums that I've posted
> before with only the changes you've seen in my smb.conf. Here is the
> link to the forum post:
> 
> http://ubuntuforums.org/archive/index.php/t-91510.html
> 
> If you have a machine you can throw together as a test machine, fire
it
> up as a stock install and follow these instructions to the letter (if
> you didn't on your production box) and see if you have any success.
> 
> Here's where the rubber meets the road. If your test machine correctly
> nests permissions, then there is something wrong with your production
> config. If it doesn't, then you have something going on in Active
> Directory.
> 
> One more thing--I'm using POSIX ACLs for permissions. Are you?
> 

Yeah, I'm using POSIX ACLs.  I did not follow that Ubuntu guide; I used
some generic instructions from a couple different places.  The biggest
difference I see at first glance is the krb5.conf (mine is blank, it
gets domain info from DNS) and a lot of the PAM configuration.

I'll try another machine with that Ubuntu guide and see what happens.

James Dinkel