Marco De Vitis
2005-Oct-11 08:47 UTC
[Samba] Group mapping only working for initial group?
Hello, on my Samba 3.0.14a PDC (Debian Woody) I created a local unix group named "gpusers". Then I mapped it to a new NT domain group named "GPPower": # net groupmap add rid=1005 ntgroup="GPPower" unixgroup=gpusers Then added a user "mdv", who already had its own initial group "mdv", to the new gpusers group: # usermod -g mdv -G gpusers mdv So the situation for mdv is the following: # groups mdv mdv : mdv gpusers I finally added the GPPower domain group to the local "Power Users" group on a domain client (Win2000Pro). In this situation, when the user logs in on that client, he is NOT part of the Power Users group. Instead, if I change his initial group: # usermod -g gpusers -G mdv mdv # groups mdv mdv : gpusers mdv ...then the user correctly appears to be part of the local Power Users group on the domain client. Shouldn't group mapping work also for groups other than the initial one? Thanks. -- Ciao, Marco.
Gerald (Jerry) Carter
2005-Oct-13 13:43 UTC
[Samba] Group mapping only working for initial group?
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Marco De Vitis wrote: | Shouldn't group mapping work also for groups other | than the initial one? Yes. It does for me. Could be the user private group that's causing problems. Windows does not allow a user and group with the same name. cheers, jerry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDTmS1IR7qMdg1EfYRAlrKAJ9OWe85hCcFs8YWrbSrkPo5dk92kACcDYBs 43bRhry7HJrMK6MejGNVIxE=TEjW -----END PGP SIGNATURE-----