[Samba] winbindd & Domain group

[Dale Schroeder]

Edgardo,

Which group is associated with gid 10000?
    getent group|grep 10000

What gid has winbind assigned to "domain users"?
    getent group|grep "domain users"

Dale


Edgardo Ghibaudo wrote:
> Domain Type: Active Directory Windows 2000 Server
> smb.conf
> [global]
>         workgroup = TEST
>         realm = TEST
>         server string = SRVBIND TEST-SITE (samba 3.3.4)
>         security = ADS
>         passdb backend = tdbsam
>         load printers = No
>         show add printer wizard = No
>         idmap uid = 10000-200000
>         idmap gid = 10000-200000
>         winbind enum users = Yes
>         winbind enum groups = Yes
>         acl group control = Yes
>         map acl inherit = Yes
> [comune]
>         comment = DISCO COMUNE
>         path = /home/comune
>         valid users = @TEST\Everyone
>         write list = @TEST\Everyone
>         read only = No
>         create mask = 0774
>         directory mask = 0774
>         follow symlinks = No
>
> nsswitch.conf
> passwd:         compat winbind
> group:          compat winbind
> shadow:         compat
> hosts:          files dns wins
> networks:       files dns
> protocols:      db files
> services:       db files
> ethers:         db files
> rpc:            db files
> netgroup:       nis
>
> Tnanks, Edgardo
> -----Messaggio originale-----
> Da: Dale Schroeder [mailto:dale at BriannasSaladDressing.com] 
> Inviato: giovedì 13 agosto 2009 21.29
> A: Edgardo Ghibaudo
> Oggetto: Re: [Samba] winbindd & Domain group
>
> Winbind should get primary group information from the domain controller.
> Please provide domain type (AD, NT, Samba) and relevant parts of 
> smb.conf and nsswitch.conf.
>
> Dale
>
> Edgardo Ghibaudo wrote:
>   
>> Hi,
>> I'm using samba rel.3.3.4.
>> The domain group associated to the domain user is always 10000 that means "Domain Users" for all the domain users
>> $> getent passwd | grep pippo
>> DOMAIN\pippo:*:10015:10000:PIPPO:/home/DOMAIN/pippo:/bin/false
>>  
>> Do you know how is it possible to assign a different domain group ?
>> How is it possible that winbindd intercepts another domain group instead of  the default "Domain Users" ?
>>  
>> Thanks in advance,
>> Edgardo Ghibaudo
>>