[Samba] Best practice - local groups - domain groups

[Karl Heinz Wichmann]

Hi Marc

Am 22.07.2014 19:21, schrieb Marc Muehlfeld:
> Am 22.07.2014 18:25, schrieb Karl Heinz Wichmann:
>> I have a generic questions about local / domain groups.
>>
>> We have 1 Domain and 20 sites. In each site is a domain controller and a
>> member server. The user have only access to share on the memberserver on
>> their site.
>>
>> user -> domain group -> share
>> or
>> user -> domain group -> local group -> share
>
>
> I see no advantage to have a domain group nested in a local group, that
> is allowed to enter a share.
>
>
>
>> Should a share be accessible for a local group or a domain group?
>> (replicaton, traffic, failure safety, security)
>
> Replication traffic is low. Only changes are transfered. I don't see any
> failure safety and security advantages. Examples?

We have multiple OU. For each site (ou) we have an sub admin to manage 
the accounts, groups and shares. We don't want that an user in ou1 can 
access to a share in ou2.

>
>
>
> Regards,
> Marc
>
>

Regards,
Karl Heinz