Hello, i am using samba 3.0.21rc1 (winbind in particular) on RHES server for a squid project : to authenticate users or check in they are member of some groups on AD W2K servers. We have a single AD forest, whith different domains, A & B. The group, in domain A, we use for our authentication process contains user from the 2 domains A & B. While using wbinfo, i cannot succeed to get a positive answer when i ask if a user from domain B belongs or not to the group. (but the user belongs to this group) i would like to know if it is possible to check the membership of a user in a group of another AD domain ? I hope it is clear enough :) thanks in advance
At 04:29 PM 3/9/2006, Lionel D?ruaz wrote:>i am using samba 3.0.21rc1 (winbind in particular) on RHES server for a >squid project : to authenticate users or check in they are member of some >groups on AD W2K servers. > >We have a single AD forest, whith different domains, A & B. > >The group, in domain A, we use for our authentication process contains >user from the 2 domains A & B. > >While using wbinfo, i cannot succeed to get a positive answer when i >ask if a user from domain B belongs or not to the group. (but the user >belongs to this group) > >i would like to know if it is possible to check the membership of a >user in a group of another AD domain ? > >I hope it is clear enough :)This sounds like the same situation that has been discussed here a bit in the past week or so. You probably want to follow bug#3530 on https://bugzilla.samba.org. Cheers, -D Don Meyer <dlmeyer@uiuc.edu> Network Manager, ACES Academic Computing Facility Technical System Manager, ACES TeleNet System UIUC College of ACES, Information Technology and Communication Services "They that can give up essential liberty to obtain a little temporary safety, deserve neither liberty or safety." -- Benjamin Franklin, 1759
I second what Don is saying, you most certainly are seeing the same thing we are. I am in the process of building a new test server to try out a patched version of samba to see if it fixes the problem. Stay tuned to the bug Don mentioned. -----Original Message----- From: samba-bounces+ronald.trimble=unisys.com@lists.samba.org [mailto:samba-bounces+ronald.trimble=unisys.com@lists.samba.org] On Behalf Of Don Meyer Sent: Thursday, March 09, 2006 6:50 PM To: Lionel D?ruaz; samba@lists.samba.org Subject: Re: [Samba] AD users from different AD domains At 04:29 PM 3/9/2006, Lionel D?ruaz wrote:>i am using samba 3.0.21rc1 (winbind in particular) on RHES server for a >squid project : to authenticate users or check in they are member of some >groups on AD W2K servers. > >We have a single AD forest, whith different domains, A & B. > >The group, in domain A, we use for our authentication process contains >user from the 2 domains A & B. > >While using wbinfo, i cannot succeed to get a positive answer when i >ask if a user from domain B belongs or not to the group. (but the user >belongs to this group) > >i would like to know if it is possible to check the membership of a >user in a group of another AD domain ? > >I hope it is clear enough :)This sounds like the same situation that has been discussed here a bit in the past week or so. You probably want to follow bug#3530 on https://bugzilla.samba.org. Cheers, -D Don Meyer <dlmeyer@uiuc.edu> Network Manager, ACES Academic Computing Facility Technical System Manager, ACES TeleNet System UIUC College of ACES, Information Technology and Communication Services "They that can give up essential liberty to obtain a little temporary safety, deserve neither liberty or safety." -- Benjamin Franklin, 1759 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
> I second what Don is saying, you most certainly are seeing the same thing we > are. I am in the process of building a new test server to try out a patched > version of samba to see if it fixes the problem. Stay tuned to the bug Don > mentioned. >ok. Thanks for the information. I will check the results of your tests.