[Samba] unix_primary_group = yes don t work

Christian Daré christian.dare at univ-brest.fr
Wed Feb 6 10:54:07 UTC 2019


Hi,

On a samba 4.9.4 fileserver using ad backend with rfc2307  , when i 
create a file from a Win10 client, it s always created with the rights 
user:"domain users".
I ve understood that with "unix_primary_group = yes" , the file should 
be created with the rights user:gidNumber .

Here is my config :
[global]
        security = ADS
        workgroup = SAMBA494
        realm = SAMBA494.UNIV-BREST.FR
        log file = /var/log/samba/%m.log
        log level = 1

        idmap config * : backend = tdb
        idmap config * : range = 700000001-800000000
        idmap config SAMBA494 : backend = ad
        idmap config SAMBA494 : range = 100000-4000000
        idmap config SAMBA494 : schema_mode = rfc2307

       idmap config SAMBA494 : unix_nss_info = yes
       idmap config SAMBA494 : unix_primary_group = yes

       username map = /etc/samba/samba_usermapping

     vfs objects = acl_xattr
     map acl inherit = yes
     store dos attributes = yes

     load printers = no
     printing = bsd
     printcap name = /dev/null
     disable spoolss = yes

     winbind enum users = yes
     winbind enum groups = yes
     winbind use default domain = yes

     usershare path =

[homes]
     comment = repertoires personnels
     browseable = no
     read only = no
     force create mode = 0755
     force directory mode = 0755

id dare
uid=202369(dare) gid=151495(pnia) groupes=151495(pnia),105000(domain 
users),700000002(BUILTIN\users)

root at mom11:/home/d/dare# ls -l
total 8
drwxrwxr-x+ 2 dare domain users 4096 févr.  6 11:44 test_win10_v1

root at mom11:/home/d/dare# getfacl test_win10_v1/
# file: test_win10_v1/
# owner: dare
# group: domain\040users
user::rwx
user:dare:rwx
group::r-x
group:domain\040users:r-x
mask::rwx
other::r-x
default:user::rwx
default:user:dare:rwx
default:group::r-x
default:group:domain\040users:r-x
default:mask::rwx
default:other::r-x

What am i missing ?
thanks

Christian D
-- 
<http://www.univ-brest.fr>




More information about the samba mailing list