[Samba] Problem with Defaulting Groups and AD

Doug VanLeuven roamdad at sonic.net
Fri Sep 7 00:34:48 GMT 2007

Hash: SHA1

Thompson, Jimi wrote:
> Jerry,
> I'm really frustrated with SAMBA.  All I want to do is have my users

I'd like to point out here that you're really frustrated with the
default group assigned by Windows Active Directory

> authenticate using the domain controller, keep them restricted to their
> own individual folder and disk quota, and have them back up their
> workstations.  
> The weird group membership that SAMBA is defaulting is pretty much
> screwing the pooch for me.  Trying to over ride the SAMBA default group

"domain users" is not a "weird group".  It is the default group assigned
by every Windows Active Directory everywhere.

> membership to set it to what I know it needs to be in order for the Unix
> file permissions to work isn't "pointless".  It's hard to back up to a

Gerry didn't say your goal was pointless, he said your configuration
parameter as stated was pointless.

> server that doesn't think you have write permissions.  
> If you can tell me what I need to do to make it work, I'd be quite
> happy.

Consult the documentation and add a mapping for "domain users" to an
actual group that would have write permission.  Try force group = <an
actual group the users belong to>

> Thanks,
> Ms. Jimi Thompson, CISSP
> Manager of Web Operations
> SMU Cox School of Business

CISSP - Certified Information Systems Security Professional
I'll control myself.

Regards, Doug

Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org


More information about the samba mailing list