[Samba] Samba Groups questions

Duncan Brannen dbb at st-andrews.ac.uk
Mon Aug 25 14:17:31 GMT 2008

      When Samba is running as a PDC and a workstation is joined to the 
Domain, should the user
logged into the workstation be able to see all the groups they are a 
member of using `ifmember /list`?
Is the below output as expected?  I'm I correct thinking that as all my 
groups originate
in the Unix world, I don't need winbind to allow the Workstations to see 

For what it's worth, Solaris 10 (Sparc) Samba 3.2.1 and OpenLDAP, 
everything bar
the Samba version should be irrelevant as it's hidden behind nsswitch 
and passdb backend?

It's a clean OS / Ldap install with the smbldap tools used to populate 
the directory and create
the user, then 'net rpc' used to create groups and add members.


On the PDC
/usr/local/samba/bin/net rpc group members room11 -Uroot%password

/usr/local/samba/bin/net groupmap list
Domain Admins (S-1-5-21-440367617-1876916578-3462541782-512) -> Domain 
Domain Users (S-1-5-21-440367617-1876916578-3462541782-513) -> Domain Users
Domain Guests (S-1-5-21-440367617-1876916578-3462541782-514) -> Domain 
Domain Computers (S-1-5-21-440367617-1876916578-3462541782-515) -> 
Domain Computers
Administrators (S-1-5-32-544) -> Administrators
Account Operators (S-1-5-32-548) -> Account Operators
Print Operators (S-1-5-32-550) -> Print Operators
Backup Operators (S-1-5-32-551) -> Backup Operators
Replicators (S-1-5-32-552) -> Replicators
room11 (S-1-5-21-440367617-1876916578-3462541782-3003) -> room11
room9 (S-1-5-21-440367617-1876916578-3462541782-3005) -> room9

getent group

getent passwd
dunk:x:1000:512:System User:/home/dunk:/bin/bash

On the workstation

net group /domain room11

returns dunk as a member

net group /domain

returns a list of all the groups mapped on the pdc that start S-1-5-21-

ifmember /list

returns the primary group CROOMTEST\Domain Admins
NT Authority\Authneticated Users

The University of St Andrews is a charity registered in Scotland : No SC013532

More information about the samba mailing list