[Samba] Best practice - local groups - domain groups

[Marc Muehlfeld]

Am 22.07.2014 18:25, schrieb Karl Heinz Wichmann:
> I have a generic questions about local / domain groups.
> 
> We have 1 Domain and 20 sites. In each site is a domain controller and a
> member server. The user have only access to share on the memberserver on
> their site.
> 
> user -> domain group -> share
> or
> user -> domain group -> local group -> share


I see no advantage to have a domain group nested in a local group, that
is allowed to enter a share.



> Should a share be accessible for a local group or a domain group?
> (replicaton, traffic, failure safety, security)

Replication traffic is low. Only changes are transfered. I don't see any
failure safety and security advantages. Examples?



Regards,
Marc