[Samba] Mapping domain groups with winbind

[Michael Gasch]

hi,

i think a fine solution is to create a localgroup with

net sam createlocalgroup <group> and put your domain group into this group

this group will then get a SID-mapping and be also visible in windows
environments (e.g. security tabs if a windows client wants to edit the
ACL of this machine)

greez

Jon Ferguson wrote:
> I've got several machines authenticating against AD via winbind.  What I
> would like to do is map Domain Users to various local groups, eg. audio,
> video, cdrom, etc.  Is this possible and if so, what is the
> correct/preferred way?

-- 
Michael Gasch
Max Planck Institute for Evolutionary Anthropology
Department of Human Evolution (IT Staff)
Deutscher Platz 6
D-04103 Leipzig
Germany

Phone: 49 (0)341 - 3550 137
       49 (0)341 - 3550 374

Fax:   49 (0)341 - 3550 399