[Samba] Problems with groups containing other groups in AD in winbind

[Diego Santa Cruz]

Hi there,

 

I have winbind running on Linux machines to do all user authentication
and group info. It is working mostly fine but groups in AD that have
other AD groups as members are not expanded. For instance in AD I define
group A to contain users X and Y. Then I add group B of which A is a
member (but X and Y are not directly members of B). If I do 'getent
group A' on the Linux machine it returns users X and Y as expected, but
if I do 'getent group B' I get no members. Is this expected to work?

 

I have winbind related stuff configured as follows:

 

   password server = my.server.com

   idmap uid = 16777216-33554431

   idmap gid = 16777216-33554431

   idmap backend = rid:MYDONAIN=16777216-33554431

   template shell = /bin/bash

   winbind use default domain = yes

   winbind enum users = true

   winbind enum groups = true

   template homedir = /home/%D/%U

   allow trusted domains = false

   use kerberos keytab = yes

   winbind nested groups = yes

 

I am running samba 3.0.24.

 

Thanks in advance,

 

Diego

--
------------------------------------------------------------------------
--

Diego Santa Cruz, PhD
Software Architect, SpinetiX S.A.

PSE-C, CH-1015, Lausanne, Switzerland
Tel:    +41 (0) 21 693 89 81
Mail:   Diego.SantaCruz at spinetix.com

Get Information : www.spinetix.com

------------------------------------------------------------------------
--

The information transmitted is intended only for the person or entity to
which it is addressed and may contain confidential and/or privileged
material. Any review, retransmission, dissemination or other use of, or
taking of any action in reliance upon, this information by persons or
entities other than the intended recipient is prohibited. If you
received
this in error, please contact the sender and delete the material from
any
computer.