[Samba] Problem with Defaulting Groups and AD

[Doug VanLeuven]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Thompson, Jimi wrote:
> Jerry,
> 
> I'm really frustrated with SAMBA.  All I want to do is have my users

I'd like to point out here that you're really frustrated with the
default group assigned by Windows Active Directory

> authenticate using the domain controller, keep them restricted to their
> own individual folder and disk quota, and have them back up their
> workstations.  
> 
> The weird group membership that SAMBA is defaulting is pretty much
> screwing the pooch for me.  Trying to over ride the SAMBA default group

"domain users" is not a "weird group".  It is the default group assigned
by every Windows Active Directory everywhere.

> membership to set it to what I know it needs to be in order for the Unix
> file permissions to work isn't "pointless".  It's hard to back up to a

Gerry didn't say your goal was pointless, he said your configuration
parameter as stated was pointless.

> server that doesn't think you have write permissions.  
> 
> If you can tell me what I need to do to make it work, I'd be quite
> happy.

Consult the documentation and add a mapping for "domain users" to an
actual group that would have write permission.  Try force group = <an
actual group the users belong to>

> 
> Thanks,
>  
> Ms. Jimi Thompson, CISSP
> Manager of Web Operations
> SMU Cox School of Business

CISSP - Certified Information Systems Security Professional
I'll control myself.

Regards, Doug

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFG4JyoFqWysr/jOHMRAtdCAJ9BPPTDNUhvOcgcNQvBnr9fhXE51gCgy+3+
pudEDdx2pRf8zGuAyQuc1nY=
=jlsu
-----END PGP SIGNATURE-----