[Samba] posix gid mapping of built-in groups

Sven Schwedas sven.schwedas at tao.at
Fri Jun 27 04:47:20 MDT 2014


On 2014-06-27 11:51, Henrik Langos wrote:
> Hi Sven,
> 
> On 06/23/14 14:40, Sven Schwedas wrote:
>> On 2014-06-23 13:32, Henrik Langos wrote:
>>> Hi Louis,
>>>
>>> Thank you for the link. I've seen your scripts before and it was on my
>>> todo list to check it out and maybe even update the wiki
>>> with a reference to it:
>>> https://wiki.samba.org/index.php/SysVol_Replication
>>>
>>> However, my problem arises from not having Windows AD groups mapped to
>>> the same posix uidnumber on all AD DCs, not from having changes made on
>>> different DCs.
>>>
>>> Is there a down side to providing posix gid numbers to all AD built-in
>>> groups?
>>> Does anybody have experience with that approach?
>> As far as I know, there is no downside, and it might even be necessary
>> for winbind; we're running with Posix attributes on all our groups
>> without issues so far.
> 
> I've added Unix attributes to all my groups using ADUC.
> Now every time I enter the "UNIX Attributes" tab in the properties
> of those groups, I get a small error dialog saying "Execution denied"
> (actually it says "Ausführung verweigert" as it is a German Windows 7 ).
> 
> I click on OK (there is no other button) and I get to edit the Unix
> attributes.
> It doesn't seem to cause trouble apart from that little dialog.
> Still I'd like to know what is happening there.
> 
> Any hint on what is to be executed and how to fix the issue?
> Ideas how I may debug this ?

We're actually having the same issue. I haven't found the cause yet, but
it /appears/ to be harmless.

> 
> cheers
> -henrik
> 

-- 
Mit freundlichen Grüßen, / Best Regards,
Sven Schwedas
Systemadministrator
TAO Beratungs- und Management GmbH | Lendplatz 45 | A - 8020 Graz
Mail/XMPP: sven.schwedas at tao.at | +43 (0)680 301 7167
http://software.tao.at

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 648 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba/attachments/20140627/ead8ffc1/attachment.pgp>


More information about the samba mailing list