[Samba] chgrp "Domain Admins" on folder return invalid group "Domain Admins"

[Rowland penny]

On 05/04/16 11:06, Jules Houantonon wrote:
> Hi Denis,
>
> Thank you for your mail.
>
> I assigned the GID 10000 to the domain admins group through ADUC, and
> wbinfo --info-group "domain admins" display the correct output.

You need to ensure that 'getent group Domain\ Admins' displays the 
required info, on one of my DCs:

root at dc1:~# getent group Domain\ Admins
SAMDOM\domain admins:x:10001:

What I think you are missing, are the libnss links, see here for info:

https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member#libnss_winbind

I know the page refers to a domain member, but it is the same basic 
setup on a DC.

You may also want to consider giving 'Domain Users' a gidNumber

Rowland

>
> But i am still not able to execute succesfuly #chgrp "Domain Admins"
> /home/demo
>
> And when i go to ADUC and try to open  the Unix Attribute of domain admins
> group, i have the error "Unable to execute". But ADUC still display the
> contain of the tab with the correct NIS domain and the GID.
>
> Is it normal ?
>
> Thank you for helping.
>
> Regards
>
>