Re: Fedora + Samba 3.0.2a, Win 2003 + AD Domain [Accounting] comment = Accounting path = /shares/accounting valid users = @"Accounting" With "Accounting" being an Active Directory domain group. "wbinfo -g" and "getent group" both show all my AD groups. If I change to "valid users = smoseman", it will validate against my AD account. But it does not want to do groups. Is my syntax wrong? I tried several other variations with same results. @Accounting, @DOMAIN\Accounting, and so on. Thanks, Scott Moseman
Yup, the "Primary Group" setting was the problem. I had no idea Samba was going to work in that way. Does anyone know the workaround? Because if I am going to need to use Primary Groups only, my Samba installation is going to be very short-lived... Thanks, Scott Moseman -----Original Message----- From: David Nalley [mailto:davidnalley@BryanRamey.com] Sent: Monday, March 29, 2004 2:44 PM To: Scott Moseman Subject: RE: [Samba] Domain Group Permissions Is Accounting the primary group?? If not, that's the problem, though I understand there is a workaround.....I have seen the workaround, just don't remember what it is.> -----Original Message----- > From: Scott Moseman [mailto:smoseman@novolink.net] > Sent: Monday, March 29, 2004 3:25 PM > To: samba@lists.samba.org > Subject: [Samba] Domain Group Permissions > > > Re: Fedora + Samba 3.0.2a, Win 2003 + AD Domain > > [Accounting] > comment = Accounting > path = /shares/accounting > valid users = @"Accounting" > > With "Accounting" being an Active Directory domain group. > "wbinfo -g" and "getent group" both show all my AD groups. > > If I change to "valid users = smoseman", it will validate > against my AD account. But it does not want to do groups. > > Is my syntax wrong? I tried several other variations with > same results. @Accounting, @DOMAIN\Accounting, and so on. >
https://bugzilla.samba.org/show_bug.cgi?id=1165 I found this fixed/resolved bug. So I will assume that this issue will be fixed in the next release. Thanks, Scott Moseman -----Original Message----- From: Scott Moseman [mailto:smoseman@novolink.net] Sent: Monday, March 29, 2004 2:50 PM To: 'samba@lists.samba.org' Subject: RE: [Samba] Domain Group Permissions Yup, the "Primary Group" setting was the problem. I had no idea Samba was going to work in that way. Does anyone know the workaround? Because if I am going to need to use Primary Groups only, my Samba installation is going to be very short-lived... Thanks, Scott Moseman -----Original Message----- From: David Nalley [mailto:davidnalley@BryanRamey.com] Sent: Monday, March 29, 2004 2:44 PM To: Scott Moseman Subject: RE: [Samba] Domain Group Permissions Is Accounting the primary group?? If not, that's the problem, though I understand there is a workaround.....I have seen the workaround, just don't remember what it is.> -----Original Message----- > From: Scott Moseman [mailto:smoseman@novolink.net] > Sent: Monday, March 29, 2004 3:25 PM > To: samba@lists.samba.org > Subject: [Samba] Domain Group Permissions > > > Re: Fedora + Samba 3.0.2a, Win 2003 + AD Domain > > [Accounting] > comment = Accounting > path = /shares/accounting > valid users = @"Accounting" > > With "Accounting" being an Active Directory domain group. > "wbinfo -g" and "getent group" both show all my AD groups. > > If I change to "valid users = smoseman", it will validate > against my AD account. But it does not want to do groups. > > Is my syntax wrong? I tried several other variations with > same results. @Accounting, @DOMAIN\Accounting, and so on. >