[Samba] Best practice - local groups - domain groups

Marc Muehlfeld mmuehlfeld at samba.org
Tue Jul 22 11:21:37 MDT 2014

Am 22.07.2014 18:25, schrieb Karl Heinz Wichmann:
> I have a generic questions about local / domain groups.
> We have 1 Domain and 20 sites. In each site is a domain controller and a
> member server. The user have only access to share on the memberserver on
> their site.
> user -> domain group -> share
> or
> user -> domain group -> local group -> share

I see no advantage to have a domain group nested in a local group, that
is allowed to enter a share.

> Should a share be accessible for a local group or a domain group?
> (replicaton, traffic, failure safety, security)

Replication traffic is low. Only changes are transfered. I don't see any
failure safety and security advantages. Examples?


More information about the samba mailing list