[Samba] Impossible to change Primary group

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Fabio Muzzi wrote:
> Hello Gerald,
> 
> Monday, January 29, 2007, 2:50:54 PM, you wrote:
> 
> 
>>> d> pdbedit -r gad -G 514 -d0
>>> d> I cann't change primary group.
> [...]
>>> Running Samba 3.0.23d with tdbsam
> 
> GJC> The primary group is based on the real Unix primary group.
> 
> Ah,  ok...  so  now  it's impossible by design to change 
> the primary group using pdbedit, right?

Yes.  This prevents the primary group reported to Windows
clients form diverging from the Unix group membership.


> Which  leads  to  the  next  question: is it a good idea 
> (from the windows clients  point of view) to have the
> "administrator" user belong to "domain users"  as  the primary
> group and "domain admins" as a secondary group, or
> is  it  better to change the unix group of the adiministrator 
> user to make it have "domain admins" as the primary group?

Doesn't matter.  Windows doesn't use the concept of a primary
group.  That was included for POSIX compliance.






cheers, jerry
=====================================================================
Samba                                    ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFvgtFIR7qMdg1EfYRAn3FAKCsnWdye3q7h719COD/2kssuPB6kACdHMIA
dCGonb5hA+8n++KYY+ooSeE=
=mKAC
-----END PGP SIGNATURE-----