[Samba] Confused about groups and access

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

David Shapiro wrote:

> My nt admin made a group for my samba server called
> Share_Dfsroot_pvcs-cdw_C and added me as a member.  I made a nested
> group on my side with
>  
> net rpc group add ntcdw -L -Uxxxxx
>  
> I then added the Share_Dfsroot... with
>  
> net rpc group addmem ntcdw "DOMAIN+Share_Dfsroot..." -Uxxxxx
>  
> net rpc group members ntcdw -Uxxxx shows:
>  
> DOMAIN\Share_Dfsroot... so all looks good.
>  
> I then created on unix side a group called ntcdw and 
> then tried to associate ntcdw (ntgroup) with ntcdw
> (unix group) with:
>  
> net groupmap modify ntgroup=ntcdw unixgroup=ntcdw
>  
> I then set my share directory to be owned by the 
> unix group ntcdw and set permissions to 770 on
> the directory.
>  
> When I try to cd into the directory with my workstation 
> login, it says Permission Denied.

David,

Couple of things to check:

* You have 'winbind nested groups = yes' (I know this is
  obvious).
* Does 'id username' show the correct listing of groups?
* Does `getent group ntcdw` return the group info?
* Does `getent group $gid_ntcdw` return the group info?
  ($gid_ntcdw is the numeric gid of ntcdw).




cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFD/xx8IR7qMdg1EfYRAvB+AKCeDLX/izARPlVHgbAXU7XT9/5bFACeMVw4
uAhx5X4VHclq2gTz0mI8AjQ=
=hvBN
-----END PGP SIGNATURE-----