samba - Jun 2006 - username map and ACL behavior

Hi,

I have question about username map and ACL.

I'm using samba 3.0.11( with winbind) on FreeBSD 5.3.
samba is AD member and that server provide NFS service.
NFS user uses NIS.

Because each user's windows's username and NIS username is different,
 we use username map like following.
unix0001 = win0001
unix0002 = win0002

When win0001 makes file, that file is created as unix0001's file.
win0001 can read/write unix0001 's file. It's OK.

Then win0001 add ACL which allow win0002 to write to that file from
windows.
samba add ACL as "win0002".

In this case, win0002 can not write that file because 
win0002 is treated as unix0002. That file doesn't have unix0002's ACL.

On the other hand, user can not add ACL of unix user because
there is no unix user on AD.

Did anyone have same situation? If you have good idea to solve it,
or you know newer version samba solves it,  please let me know.

Regards,
-takka


Takafumi Yonekura |  Technical Specialist
Isilon Systems K.K.    Phone 050-3387-9278  Fax  03-5728-3587
www.isilon.jp     takafumi.yonekura@isilon.com

  The Leader in Clustered Storage

On Wed, Jun 21, 2006 at 08:42:16PM -0700, Takafumi Yonekura
wrote:
> I'm using samba 3.0.11( with winbind) on FreeBSD 5.3.
> samba is AD member and that server provide NFS service.
> NFS user uses NIS.
Please test with 3.0.23rc3, we have changed a lot in the
username map area and the handling of sids/ids/names.

Volker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url :
http://lists.samba.org/archive/samba/attachments/20060622/615647a1/attachment.bin