[Samba] security = ads, username map and valid users

[G.W. Haywood]

Hi there,

On Thu, 24 Jan 2013, Rainer Canavan wrote:

> I would like to use Samba (3.5.10 as supplied with RHEL6 if possible) to 
> make some directories accessible as a filesystem to (some of) our developers. 
> However, those directories are read and written by a web server, and all files 
> and  directories in there should belong to www-data:www-data.
> 
> The obvious solution is a username map ...

The username map feature is broken in current Samba 3 (although
possibly not in your preferred version) and AFAICT it is likely to
remain so for the forseeable future:

https://bugzilla.samba.org/show_bug.cgi?id=8881

My recommendation would be to avoid relying on the feature, which I
know is a royal pain because that's what I'm having to do, but if you
do find that you have to upgrade from your currently preferred version
then you might get bitten by the bug.

If enough people subscribe to the CC list on the bugzilla page maybe
it will get onto the radar screen of someone who is capable of doing
something about it.

--

73,
Ged.