[Samba] Grant only one AD group to samba share ?

[Newman, John W]

Thanks..

Unfortunately neither suggestion worked

chgrp still just says "invalid group"

valid users  = @"DOMAIN\\My Group" behaves the same as I described in the OP.  Valid credentials = access denied ; invalid credentials = invalid name or bad password.    I already tried all sorts of things in valid users, but nothing is the magic string I need. 

Any other ideas?

Thanks for the help so far, much appreciated!!

-----Original Message-----
From: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] On Behalf Of steve
Sent: Tuesday, May 22, 2012 04:59
To: samba at lists.samba.org
Subject: Re: [Samba] Grant only one AD group to samba share ?

On 21/05/12 23:36, Dale Schroeder wrote:
> On 05/21/2012 3:42 PM, Newman, John W wrote:


>> Thanks for the suggestion, but .. that doesn't work ...
>>
>>
>> chgrp My\ Group /media/share
>> chgrp: invalid group: `My Group'
>>
>>
>> "My Group" is a windows AD group, not a local linux group. The 
>> machine is "joined" to the windows domain through "net ads join", but 
>> I don't think the security is that tightly integrated. I don't have 
>> windows groups mapped to linux groups I've created or anything like that.
>> chgrp is expecting a linux group. Right?
>>
>> Probably I am missing something, or you guys need more information.
>> Any thoughts?

Hi
Sorry. I forgot about winbind (we use nss-pam-ldapd). With winbind running that should read:

chgrp MYDAOMAIN\\My\ Group /media/share

Cheers,
Steve
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba