[Samba] chgrp "Domain Admins" on folder return invalid group "Domain Admins"

Jules Houantonon juleshoueto at gmail.com
Tue Apr 5 10:06:08 UTC 2016

Hi Denis,

Thank you for your mail.

I assigned the GID 10000 to the domain admins group through ADUC, and
wbinfo --info-group "domain admins" display the correct output.

But i am still not able to execute succesfuly #chgrp "Domain Admins"

And when i go to ADUC and try to open  the Unix Attribute of domain admins
group, i have the error "Unable to execute". But ADUC still display the
contain of the tab with the correct NIS domain and the GID.

Is it normal ?

Thank you for helping.


On Tue, Apr 5, 2016 at 7:58 AM, Denis Cardon <
denis.cardon at tranquil-it-systems.fr> wrote:

> Hi Jules,
> I am trying to deploy Samba4 as a domain controller and a file server and
>> having some issues.*
>> The domain have been well provisioned with option --use-rfc2307
>> I am then trying to create share by following this samba wiki
>> https://wiki.samba.org/index.php/Shares_with_Windows_ACLs
>> The problem is that i cannot succeed to change the group owner of the
>> folder I want to share as recommended  with the following command
>> chgrp "Domain Admins" /home/demo
>> When I try the chgrp command I receive and error  : invalid group "Domain
>> Admins'.
>> I then read the article that explain the subject about setting up rfc2307
>> in AD
> when using rfc2307, you have to define a uid or gid for all the users and
> groups that you plan to use on your fileserver. By default "domain admins"
> group has no gid, only a SID. So you have to set it up. If there is no gid,
> you can still see it with wbinfo -g, but you won't see it using getent
> group <groupname>.
> HTH,
> Denis
>> https://wiki.samba.org/index.php/Setting_up_RFC2307_in_AD#NIS_Extensions_installed_inside_the_directory
>> and can confirm that  the "ypServ30" container exists.
>> I wonder what is happening and if anyone could help me.
>> Thank you for reading and helping
>> Regards
>> *Phone* : (00229) 97578914
>> *Email *: juleshoueto at gmail.com
>> *Skype* : houantonon
>> *linkedin* : www.linkedin.com/in/jhouantonon/en
> --
> Denis Cardon
> Tranquil IT Systems
> Les Espaces Jules Verne, bâtiment A
> 12 avenue Jules Verne
> 44230 Saint SĂ©bastien sur Loire
> tel : +33 (0)
> http://www.tranquil-it-systems.fr

*Phone* : (00229) 97578914
*Email *: juleshoueto at gmail.com
*Skype* : houantonon
*linkedin* : www.linkedin.com/in/jhouantonon/en

More information about the samba mailing list