[Samba] cifs share for profiles

[Rowland penny]

On 07/07/16 10:29, Trenta sis wrote:
> Hi,
>
> Tried to add winbind in nsswtich but same result , getent group "domain
> admins" without any result
>
> smb.conf
>
> # Global parameters
> [global]
>          bind interfaces only = Yes
>          interfaces = lo eth0
>          netbios name = dc
>          realm = domain.com
>          server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl,
> winbin
> dd, ntp_signd, kcc, dnsupdate
>          workgroup = domain
>          server role = active directory domain controller
>          idmap_ldb:use rfc2307 = yes
>          comment =
>
> [profilesad]
>          path = /local/var/profilesad
>          read only = No
>
>
> I have used shares with windows acl and also posix acl
>
>
> I have configured cifs profiles and we can create but with getfacl I have
> detected that doamin users has no permission, only thing that we need is
> add features to domain admins to allow access cifs profiles, with our
> actual config only owner can....
>
>
> Where is the problem?
>
> Thanks
>
>
> 2016-07-07 9:56 GMT+02:00 Trenta sis <trenta.sis at gmail.com>:
>
>> Hi,
>>
>> I have installed samba 4.4.4 and configured and works perfect, now I need
>> to configure roaming profiles and reading
>> https://wiki.samba.org/index.php/Shares_with_Windows_ACLs
>>
>> I have detected that I can't configure
>>
>> chgrp "Domain Admins" /srv/samba/Demo/
>>
>>
>> I'm creating this share on our dc, but seem that with
>> # getent group "Domain Admins"
>>
>> any samba AD group is recovered
>>
>>
>>
>> I have found
>> "If you don't get an output showing the queried name and its ID, there may
>> be something wrong in your NSS configuration
>> <https://wiki.samba.org/index.php?title=Name_service_switch_(NSS)&action=edit&redlink=1> or
>> if you are using Winbindd with RFC2307 (idmap_ad)
>> <https://wiki.samba.org/index.php/Idmap_config_ad>, you might not have an
>> ID assigned (see User and group management
>> <https://wiki.samba.org/index.php/User_and_group_management> for how to
>> administer Unix Attributes in an AD)"
>>
>> but I don't know where is the problem with wbinfo we recover user and
>> group but with getent not.
>>
>> We are making thins test on our samba doamin controller with samba 4.4.4
>> and debian jessie
>>
>>
>> Where is the problem?
>>
>> Thanks
>>
>>

Did you compile Samba your self, or are you using packages from somewhere ??

Rowland