[Samba] Impossible to change Primary group

Gerald (Jerry) Carter jerry at samba.org
Mon Jan 29 14:57:09 GMT 2007

Hash: SHA1

Fabio Muzzi wrote:
> Hello Gerald,
> Monday, January 29, 2007, 2:50:54 PM, you wrote:
>>> d> pdbedit -r gad -G 514 -d0
>>> d> I cann't change primary group.
> [...]
>>> Running Samba 3.0.23d with tdbsam
> GJC> The primary group is based on the real Unix primary group.
> Ah,  ok...  so  now  it's impossible by design to change 
> the primary group using pdbedit, right?

Yes.  This prevents the primary group reported to Windows
clients form diverging from the Unix group membership.

> Which  leads  to  the  next  question: is it a good idea 
> (from the windows clients  point of view) to have the
> "administrator" user belong to "domain users"  as  the primary
> group and "domain admins" as a secondary group, or
> is  it  better to change the unix group of the adiministrator 
> user to make it have "domain admins" as the primary group?

Doesn't matter.  Windows doesn't use the concept of a primary
group.  That was included for POSIX compliance.

cheers, jerry
Samba                                    ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
Version: GnuPG v1.4.2.2 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org


More information about the samba mailing list