[Samba] grant windows group share permission
Rowland Penny
rpenny at f2s.com
Fri Nov 16 09:17:19 MST 2012
On 16/11/12 13:55, lst_hoe02 at kwsoft.de wrote:
> Hello
>
> i like to give a windows group (W2K3-AD) permissions to use a share
> read/write on a Samba domain member server. Therefore if have added
> the Samba server to the domain without problem and created a share
> like this:
>
> [bild]
> comment = Some Comment
> path = /data/bild
> admin users = root
> force user = smbuser
> force group = sambashare
> valid users = DOMAIN\w-user1 @DOMAIN\w-group1
> guest ok = no
> read only = no
> writeable = yes
> browseable = yes
>
> The windows domain user "w-user1" work as it should, but no member of
> the windows group "w-group1" can access the share. If have also tried
> mapping the windows group to the Unix group "sambashare" with
> "username map" but always get access denied eg. asked for a windows user.
>
> Can please someone give a hint how to grant access for a windows group
> without adding/removing the members to a Unix group?
>
> Many Thanks
>
> Andi
>
>
>
Hi, just a few pointers:
You can remove the 'admin users' line, here you are giving 'root' root
privileges
You only need one of the 'read only' & 'writeable' lines, they both mean
the same, I suggest using 'read only'
Finally, try removing the @ sign, I do not think you need it with
winbind (I take it you are using winbind)
Rowland
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
More information about the samba
mailing list