search for: unixgrp1

Hi, I think I've narrowed down my problem to the fact that the group mapping is not giving me the same GID for all 'equivalent' groups, as seen here: $ net groupmap list DOMAIN\Group1 (S-1-5-21-620321403-24207062-1845911597-172256) -> unixgrp1 $ getent group unixgrp1 unixgrp1:x:203: $ getent group DOMAIN\\Group1 DOMAIN\Group1:x:10001:DOMAIN\User1 This means that the GID of unixgrp1 is 203, however the GID of DOMAIN\Group1 is completely different! Given the group mapping, I was expecting that both groups would be returned with a GID o...

...g standard UNIX permissions for access control. This all seems to work, *except* the mapping between the Active Directory groups and the local UNIX groups. I tried to map the domain group directly to a local UNIX group (with "net groupmap"), so that (for example): DOMAIN\Group1 => unixgrp1 But if I connect to the share as the user DOMAIN\User (who is a member of DOMAIN\Group1) I am unable to create files in folders writable by unixgrp1. If I make a world writable directory, files created by DOMAIN\User are owned by DOMAIN\User with the group "DOMAIN\Domain Users" (of which...