force group with security=ads, winbind and local(NIS) groups not working

Hansjörg Maurer Hansjoerg.Maurer at dlr.de
Mon Mar 19 15:36:43 GMT 2007


Hi

I have updated a test system from 3.0.21b to 3.0.25pre1.
The samba server is memeber of an AD-Domain, but all users/groups
come from NIS.
The system was referenced in the thread
http://lists.samba.org/archive/samba-technical/2006-August/048681.html
(New approach to "valid users" fix)

Until 3.0.21b
we where able to add a share with
[TMP]
    path = /tmpdir
   force group = terrain
 
 
and all files created there belong to group terrain

Now with 3.0.25pre1and  with the forcegroup I (domain-user maurer) do
not even have access to the share
even if the filesystem is granting access.

drwxrwxrwx    2 root     root         4096 19. Mar 16:02 tmpdir/

[global]
security = ADS
workgroup = DOM
realm = REALM
encrypt passwords = yes
netbios name = NAME
winbind use default domain = Yes
winbind trusted domains only = Yes
idmap uid = 10000-10000
idmap gid = 10000-10000
client use spnego = yes




-- 
_________________________________________________________________

Deutsches Zentrum fuer Luft- und Raumfahrt e.V.
in der Helmholtz-Gemeinschaft

Institut fuer Robotik und Mechatronik

Dr. Hansjörg Maurer

LAN- und Systemmanager

Münchner Strasse 20
82234 Wessling
Germany 

Telefon: 08153/28-2431 
Telefax: 08153/28-1134

E-Mail: Hansjoerg.Maurer at dlr.de
Internet: http://www.robotic.dlr.de/

__________________________________________________________________


There are 10 types of people in this world, 
those who understand binary and those who don't.



More information about the samba-technical mailing list