samba - Apr 2003 - Samba groups

Hi there,
 
I have a Redhat 9 server setup as an PDC with samba 2.2.7. Is it
possible to temporarily disable a group of users to login to the PDC or
can it only be done on a per username basis ?
 
Thanks
 

 
_____  


Egmont Uys 
Tel: 27 (0)11 391 6505 
Fax: 27 (0)11 391 5256 
E-mail: euys@ataglance.co.za 

************************************************************************
**************** 
This e-mail and attachments are confidential / legally privileged and
any 
Unauthorized use, distribution or disclosure thereof, in whatever form,
by 
Anyone other than the addressee is prohibited. If you have received this

e-mail in error, please destroy it. The views and opinions in this
e-mail 
and attachments may not necessarily be those of the Directors and 
management of the At A Glance. The aforementioned does not 
accept any liability for any damage, loss or expense arising from this 
e-mail and / or from accessing any attachments. 
************************************************************************
****************

try man page on smb.conf for
valid users = abc
write list = ...
or I think...  invalid users = @groupname

On Wed, 2003-04-30 at 21:15, Egmont Uys wrote:
> Hi there,
>  
> I have a Redhat 9 server setup as an PDC with samba 2.2.7. Is it
> possible to temporarily disable a group of users to login to the PDC or
> can it only be done on a per username basis ?
>  
> Thanks
>  
> 
> 
> _____  
> 
> 
> Egmont Uys 
> Tel: 27 (0)11 391 6505 
> Fax: 27 (0)11 391 5256 
> E-mail: euys@ataglance.co.za 
> 
> ************************************************************************
> **************** 
> This e-mail and attachments are confidential / legally privileged and
> any 
> Unauthorized use, distribution or disclosure thereof, in whatever form,
> by 
> Anyone other than the addressee is prohibited. If you have received this
> 
> e-mail in error, please destroy it. The views and opinions in this
> e-mail 
> and attachments may not necessarily be those of the Directors and 
> management of the At A Glance. The aforementioned does not 
> accept any liability for any damage, loss or expense arising from this 
> e-mail and / or from accessing any attachments. 
> ************************************************************************
> **************** 
> 
> 
> 
>

Hi Everyone :)

	I'm running Samba-2.2.8a on two PC'S. One PC call POSTA runs as a PDC. 
	workgroup = SAMBANET
	netbios name = POSTA
	server string = Samba Server
	bind interfaces only = No
	security = USER
	encrypt passwords = Yes
	update encrypted = No
	allow trusted domains = Yes

The second runs as a domain client
	workgroup = SAMBANET
	netbios name = ROBERTO-UX
	server string = Samba Client
	security = DOMAIN
	encrypt passwords = Yes
	obey pam restrictions = Yes
	pam password change = Yes
I have winbind running on the client only.

	I've created 3 groups: Installation, storage and anonymous. I added
myself (user:roberto) to each group. Than in a samba share, I added
valid user @(each group). In doing so, I'm assuming that each group is a
Global/Domain Group

	when I do wbinfo -g, I get the following

[root@roberto-xp root]# /usr/local/samba/bin/wbinfo -g
SAMBANET\Domain Admins
SAMBANET\Domain Users

Am I know supposed to see my three groups (Installation, storage and anonymous)
I guess this is related, when I do a getent group, I do not see my 3
"Domain Groups"


Second question.
	When I do a getent passwd, I see the all users, including those of my PDC
SAMBANET.
	Yet when I do the following:

[root@roberto-xp root]# /usr/local/samba/bin/wbinfo -s
SAMBANET+roberto%barnburner
Could not lookup sid SAMBANET+roberto%barnburner

I can not log from my client computer using a domain user/password. 

Can anyone suggest where I'm going wrong?

Thank You
Roberto