[Samba] The way things used to work...

J. Pilfold-Bagwell jpb at bordengrammar.kent.sch.uk
Thu Feb 12 09:34:58 GMT 2009

Try changing "force group = foobar" to "force group = DOMAIN\foobar" .

The way Samba handles groups was changed (it was in the release notes
around 3.0.28) and if you use read list and write list in smb.conf,
users are now specified using DOMAIN\username and groups using +DOMAIN
\groupname instead of the old @groupname . This way, you can specify
permissions for multiple NT domains.

Example from my smb.conf:

comment = Open Share for Distribution
path = /share/resources
browseable = yes
writeable = yes
read list = +"BGS\Domain Admins" +BGS\staff +BGS\visitors +"BGS\Domain
write list = +"BGS\Domain Admins" +"BGS\staff"
create mask = 440
directory mask = 770

I believe that you now also have to be a member of a group for force
group =  to work so everyone who creates a file in the share will have
to be in group DOMAIN\foobar It may be that something's changed in v 3.2
(MS keeps moving the target) so check the release notes again if it
doesn't work.

Good Luck,


On Wed, 2009-02-11 at 21:22 +0000, Dragan Lukic wrote:
> email message attachment
> > -------- Forwarded Message --------
> > Subject: 
> > Date: Thu, 12 Feb 2009 08:29:22 -0000
> > 

More information about the samba mailing list