[Samba] users via winbind and using @group in smb.conf

[Michael Gasch]

if "private" is a group, you have to add @ in front of the "valid users" 
entry. according to a post of jerry the syntax with ticks and spaces is 
correct.

please also increase the debug level on the server side to see why it fails

greez

Stefan Froehlich wrote:
> On Fri, Jan 05, 2007 at 12:25:35PM +0100, Michael Gasch wrote:
>> could you please try the latest samba (or at least 3.0.23c) and use
>> valid users = "Unix Group"\your_local_group
> 
> This does not change very much:
> 
> | [Server B]
> | # smbd -V
> | Version 3.0.23c-2
> | # cat /etc/samba/smb.conf |grep "valid users"
> |         valid users = "Unix Group"\private 
> | 
> | [Client]
> | $ smbclient  //serverb/private -U user1
> | added interface ip=192.168.1.250 bcast=192.168.1.255 nmask=255.255.255.0
> | added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0
> | Password: 
> | Domain=[DOMAIN] OS=[Unix] Server=[Samba 3.0.23c-2]
> | tree connect failed: NT_STATUS_ACCESS_DENIED
> 
> Is the syntax correct, i.e. "Unix Group" has to be written as is and in
> quotes?
> 
> Server B is not under my control, but I _could_ trigger an update to
> 3.023d if there is a somewhat realistic chance this would help. The
> release notes say:
> 
> | * Fix primary group lookup failures.  Use the Get_Pwnam_alloc() 
> |   call to ensure it finds the Unix user first.
> 
> Could this be an issue here?
> 
> Bye,
>   Stefan
>