[Samba] Force set group id on samba domain member

[Michal]

2018-07-24 16:53 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>:

> On Tue, 24 Jul 2018 15:57:46 +0200
> Michal <Michal67M at seznam.cz> wrote:
>
> > For being honest, in my previous tests this user's (user test1) new
> > files was created with NIS\audio group as extected; but other user's
> > files (user amistest) was created with "NIS\domain users" group (in
> > the same "audio" directory). This lasted a few days.
> >
> > It looked like
> > drwxr-sr-x  2 NIS\amistest NIS\audio        4096 Jul 24 08:17
> > amistestdir drwxrwsr-x+ 2 NIS\amistest NIS\domain users 4096 Jul 24
> > 11:48 amistestdir2       -> why NOT NIS\audio group?
> > -rw-r--r--  1 NIS\amistest NIS\audio           0 Jul 24 08:17
> > amistestfile -rwxrwxr-x+ 1 NIS\amistest NIS\domain users    7 Jul 24
> > 11:49 amistestfile2      -> why NOT NIS\audio group?
> > drwxr-sr-x  2 NIS\test1    NIS\audio        4096 Jul 24 08:15 test1dir
> > -rw-r--r--  1 NIS\test1    NIS\audio           0 Jul 24 08:16
> > test1file
> >
> > But during writing my initial post about this topic, files of both
> > these users started to have "NIS\domain users" group. I am not aware
> > of change which could be the reason.
> >
>
> Do the users have a gidNumber attribute containing the gidNumber of the
> required group and if so, is the gidNumber inside the range set in
> smb.conf and is the version of Samba >= 4.6.0
>

su - amistest
Last login: Tue Jul 24 22:37:47 CEST 2018 on pts/4
$ id
uid=6603(NIS\amistest) gid=20(games) groups=20(games),513(NIS\domain
users),2108(NIS\evis),2109(NIS\slp),2126(NIS\poj),2157(NIS\audio),2164(NIS\doprava),2181(NIS\tomocon),2186(NIS\pacs_diagnostik),10001(BUILTIN\users)
-bash-4.2$ logout

[root at samba4 audio]# su - test1
Last login: Tue Jul 24 11:52:35 CEST 2018 on pts/4
$ id
uid=2075(NIS\test1) gid=20(games) groups=20(games),513(NIS\domain
users),2157(NIS\audio),2186(NIS\pacs_diagnostik),10001(BUILTIN\users)

# smbd -V
Version 4.8.3

Michal



>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>