[Samba] limits.conf and AD domain groups

Rowland Penny rowlandpenny241155 at gmail.com
Wed Nov 25 21:10:51 UTC 2015

On 25/11/15 20:43, David Bear wrote:
> I am using a member server with AD as my source of accounts. ssh logins
> work great.
> Yesterday, one of my students wanted to see what a fork bomb was and so now
> I need to place ulimits on place. Attempts to use AD domain groups fail. So
> I'm not sure this is an issue for samba+winbind or for
> /etc/security/limits.conf  and pam.
> Here's what I have added in limits.conf
> # -- fix fork bomb issue --
> @"Domain Users"        soft    nproc           20
> @"Domain Users"        hard    nproc           20
> And here is what I have in pam.d/common-session
> session required pam_limits.so
> --
> I'm pretty sure the pam stuff is correct because I was able to set nproc
> limits on a non-domain user.
> But I'm wondering if we can set limits to AD provided groups. Any advice?

Never tried, but does 'getent group Domain\ Users' return anything ?


More information about the samba mailing list