I was interested to create groups to use for authenticated access. Say for instance I configure samba to use FDS, can it actually use those groups to control permissions? What about the gidnumber? This all the docs had to say about it: 5.4. Using Groups Groups are a mechanism for associating entries for ease of administration. This mechanism was provided with previous versions of Directory Server and should be used primarily for compatibility with older versions of the server.
solarflow99 wrote:> I was interested to create groups to use for authenticated access. > Say for instance I configure samba to use FDS, can it actually use > those groups to control permissions? What about the gidnumber? This > all the docs had to say about it: > > > > 5.4. Using Groups > > Groups are a mechanism for associating entries for ease of > administration. This mechanism was provided with previous versions of > Directory Server and should be used primarily for compatibility with > older versions of the server. >See http://tinyurl.com/3yo88r and http://tinyurl.com/2snfle and http://tinyurl.com/337g46 for some examples using groups with ACIs.> > > > ------------------------------------------------------------------------ > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >
I don''t see this actually doing group control, it looks more like access control within the LDAP tree itself. On 2/29/08, Rich Megginson <rmeggins@redhat.com> wrote:> > solarflow99 wrote: > > I was interested to create groups to use for authenticated access. > > Say for instance I configure samba to use FDS, can it actually use > > those groups to control permissions? What about the gidnumber? This > > all the docs had to say about it: > > > > > > > > 5.4. Using Groups > > > > Groups are a mechanism for associating entries for ease of > > administration. This mechanism was provided with previous versions of > > Directory Server and should be used primarily for compatibility with > > older versions of the server. > > > See http://tinyurl.com/3yo88r and http://tinyurl.com/2snfle and > http://tinyurl.com/337g46 for some examples using groups with ACIs. > > > > > > > > ------------------------------------------------------------------------ > > > > -- > > Fedora-directory-users mailing list > > Fedora-directory-users@redhat.com > > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > >
solarflow99 wrote:> I don''t see this actually doing group control, it looks more like > access control within the LDAP tree itself.What do you mean by "group control"? Something like Group Policy in Active Directory?> > > > On 2/29/08, *Rich Megginson* <rmeggins@redhat.com > <mailto:rmeggins@redhat.com>> wrote: > > solarflow99 wrote: > > I was interested to create groups to use for authenticated access. > > Say for instance I configure samba to use FDS, can it actually use > > those groups to control permissions? What about the > gidnumber? This > > all the docs had to say about it: > > > > > > > > 5.4. Using Groups > > > > Groups are a mechanism for associating entries for ease of > > administration. This mechanism was provided with previous > versions of > > Directory Server and should be used primarily for compatibility with > > older versions of the server. > > > See http://tinyurl.com/3yo88r and http://tinyurl.com/2snfle and > http://tinyurl.com/337g46 for some examples using groups with ACIs. > > > > > > > > > ------------------------------------------------------------------------ > > > > -- > > Fedora-directory-users mailing list > > Fedora-directory-users@redhat.com > <mailto:Fedora-directory-users@redhat.com> > > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > <mailto:Fedora-directory-users@redhat.com> > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > ------------------------------------------------------------------------ > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >
not even that complex. Just a logical grouping like unix groups work. Do the groups in FDS work like that if I add users in them? I think i''ve almost got it working with samba from the howto, but where to create the groups and map them I still don''t understand. On 3/4/08, Rich Megginson <rmeggins@redhat.com> wrote:> > solarflow99 wrote: > > I don''t see this actually doing group control, it looks more like > > access control within the LDAP tree itself. > What do you mean by "group control"? Something like Group Policy in > Active Directory? > > > > > > > > On 2/29/08, *Rich Megginson* <rmeggins@redhat.com > > <mailto:rmeggins@redhat.com>> wrote: > > > > solarflow99 wrote: > > > I was interested to create groups to use for authenticated access. > > > Say for instance I configure samba to use FDS, can it actually use > > > those groups to control permissions? What about the > > gidnumber? This > > > all the docs had to say about it: > > > > > > > > > > > > 5.4. Using Groups > > > > > > Groups are a mechanism for associating entries for ease of > > > administration. This mechanism was provided with previous > > versions of > > > Directory Server and should be used primarily for compatibility > with > > > older versions of the server. > > > > > See http://tinyurl.com/3yo88r and http://tinyurl.com/2snfle and > > http://tinyurl.com/337g46 for some examples using groups with ACIs. > > > > > > > > > > > > > > > ------------------------------------------------------------------------ > > > > > > -- > > > Fedora-directory-users mailing list > > > Fedora-directory-users@redhat.com > > <mailto:Fedora-directory-users@redhat.com> > > > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > > > > > > -- > > Fedora-directory-users mailing list > > Fedora-directory-users@redhat.com > > <mailto:Fedora-directory-users@redhat.com> > > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > > > > > ------------------------------------------------------------------------ > > > > -- > > Fedora-directory-users mailing list > > Fedora-directory-users@redhat.com > > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > >
Yes, groups works exactly as local groups.
In fact, you must ensure that your users belongs to the right group or you
may have problems accessing samba shares.
Para
"General discussion list for the
Fedora Directory server
solarflow99 project."
<solarflow99@gmail.com>
<fedora-directory-users@redhat.c
Enviado por: om>
fedora-directory-users-b cc
ounces@redhat.com
Asunto
04/03/2008 02:53 p.m. Re: [Fedora-directory-users]
groups
Clasificación
Uso Interno
Por favor, responda a
"General discussion list
for the Fedora Directory
server project."
<fedora-directory-users@
redhat.com>
not even that complex. Just a logical grouping like unix groups work. Do
the groups in FDS work like that if I add users in them?
I think i''ve almost got it working with samba from the howto, but where
to
create the groups and map them I still don''t understand.
On 3/4/08, Rich Megginson <rmeggins@redhat.com> wrote:
solarflow99 wrote:
> I don''t see this actually doing group control, it looks more
like
> access control within the LDAP tree itself.
What do you mean by "group control"? Something like Group
Policy in
Active Directory?
>
>
>
> On 2/29/08, *Rich Megginson* <rmeggins@redhat.com
> <mailto:rmeggins@redhat.com>> wrote:
>
> solarflow99 wrote:
> > I was interested to create groups to use for authenticated
access.
> > Say for instance I configure samba to use FDS, can it
actually use
> > those groups to control permissions? What about the
> gidnumber? This
> > all the docs had to say about it:
> >
> >
> >
> > 5.4. Using Groups
> >
> > Groups are a mechanism for associating entries for ease of
> > administration. This mechanism was provided with previous
> versions of
> > Directory Server and should be used primarily for
compatibility with
> > older versions of the server.
> >
> See http://tinyurl.com/3yo88r and http://tinyurl.com/2snfle and
> http://tinyurl.com/337g46 for some examples using groups with
ACIs.
> >
> >
> >
> >
>
------------------------------------------------------------------------
> >
> > --
> > Fedora-directory-users mailing list
> > Fedora-directory-users@redhat.com
> <mailto:Fedora-directory-users@redhat.com>
> >
https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >
>
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> <mailto:Fedora-directory-users@redhat.com>
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>
>
>
------------------------------------------------------------------------
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
--
Fedora-directory-users mailing list
Fedora-directory-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
--
Fedora-directory-users mailing list
Fedora-directory-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
=======================================================================================AVISO
LEGAL: Esta información es privada y confidencial y está dirigida
únicamente a su destinatario. Si usted no es el destinatario original de
este mensaje y por este medio pudo acceder a dicha información por favor
elimine el mensaje. La distribución o copia de este mensaje está
estrictamente prohibida. Esta comunicación es sólo para propósitos de
información y no debe ser considerada como propuesta, aceptación ni como
una declaración de voluntad oficial de NUCLEO S.A. La transmisión de
e-mails no garantiza que el correo electrónico sea seguro o libre de error.
Por consiguiente, no manifestamos que esta información sea completa o
precisa. Toda información está sujeta a alterarse sin previo aviso.
This information is private and confidential and intended for the
recipient only. If you are not the intended recipient of this message you
are hereby notified that any review, dissemination, distribution or
copying of this message is strictly prohibited. This communication is for
information purposes only and shall not be regarded neither as a proposal,
acceptance nor as a statement of will or official statement from NUCLEO
S.A. . Email transmission cannot be guaranteed to be secure or error-free.
Therefore, we do not represent that this information is complete or
accurate and it should not be relied upon as such. All information is
subject to change without notice.
do you use FDS with samba? I wonder what you did for the groups. On Tue, Mar 4, 2008 at 9:10 PM, Ivan Ferreira <iferreir@personal.com.py> wrote:> Yes, groups works exactly as local groups. > > In fact, you must ensure that your users belongs to the right group or you > may have problems accessing samba shares. > > > > > > > > > Para > "General discussion list for the > Fedora Directory server > solarflow99 project." > <solarflow99@gmail.com> <fedora-directory-users@redhat.c > Enviado por: om> > fedora-directory-users-b cc > ounces@redhat.com > Asunto > 04/03/2008 02:53 p.m. Re: [Fedora-directory-users] > groups > Clasificación > Uso Interno > Por favor, responda a > "General discussion list > for the Fedora Directory > server project." > <fedora-directory-users@ > redhat.com> > > > > > > > not even that complex. Just a logical grouping like unix groups work. Do > the groups in FDS work like that if I add users in them? > > I think i''ve almost got it working with samba from the howto, but where to > create the groups and map them I still don''t understand. > > > > On 3/4/08, Rich Megginson <rmeggins@redhat.com> wrote: > solarflow99 wrote: > > I don''t see this actually doing group control, it looks more like > > access control within the LDAP tree itself. > What do you mean by "group control"? Something like Group Policy in > Active Directory? > > > > > > > > On 2/29/08, *Rich Megginson* <rmeggins@redhat.com > > <mailto:rmeggins@redhat.com>> wrote: > > > > solarflow99 wrote: > > > I was interested to create groups to use for authenticated > access. > > > Say for instance I configure samba to use FDS, can it > actually use > > > those groups to control permissions? What about the > > gidnumber? This > > > all the docs had to say about it: > > > > > > > > > > > > 5.4. Using Groups > > > > > > Groups are a mechanism for associating entries for ease of > > > administration. This mechanism was provided with previous > > versions of > > > Directory Server and should be used primarily for > compatibility with > > > older versions of the server. > > > > > See http://tinyurl.com/3yo88r and http://tinyurl.com/2snfle and > > http://tinyurl.com/337g46 for some examples using groups with > ACIs. > > > > > > > > > > > > > > > > ------------------------------------------------------------------------ > > > > > > > -- > > > Fedora-directory-users mailing list > > > Fedora-directory-users@redhat.com > > <mailto:Fedora-directory-users@redhat.com> > > > > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > > > > > > -- > > Fedora-directory-users mailing list > > Fedora-directory-users@redhat.com > > <mailto:Fedora-directory-users@redhat.com> > > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > > > > > > > ------------------------------------------------------------------------ > > > > > -- > > Fedora-directory-users mailing list > > Fedora-directory-users@redhat.com > > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > =======================================================================================> AVISO LEGAL: Esta información es privada y confidencial y está dirigida > únicamente a su destinatario. Si usted no es el destinatario original de > este mensaje y por este medio pudo acceder a dicha información por favor > elimine el mensaje. La distribución o copia de este mensaje está > estrictamente prohibida. Esta comunicación es sólo para propósitos de > información y no debe ser considerada como propuesta, aceptación ni como > una declaración de voluntad oficial de NUCLEO S.A. La transmisión de > e-mails no garantiza que el correo electrónico sea seguro o libre de > error. > Por consiguiente, no manifestamos que esta información sea completa o > precisa. Toda información está sujeta a alterarse sin previo aviso. > > This information is private and confidential and intended for the > recipient only. If you are not the intended recipient of this message you > are hereby notified that any review, dissemination, distribution or > copying of this message is strictly prohibited. This communication is for > information purposes only and shall not be regarded neither as a proposal, > acceptance nor as a statement of will or official statement from NUCLEO > S.A. . Email transmission cannot be guaranteed to be secure or error-free. > Therefore, we do not represent that this information is complete or > accurate and it should not be relied upon as such. All information is > subject to change without notice. > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >