samba - Dec 2005 - joined to ads, mapped permissions

I have joined samba to a 2003 active directory server.

If a samba shared dir is owned by root, how does active directory manage it?

more specifically, how are the permissions mapped? administrator to root?

i have seen reference to a parameter in smb.conf to "username map",
but i don't see reference to it in either of the John Terpstra Samba 
books so that can't be the bridge between windows and linux
permisssions.

TIA

Actually, in the case of disparate usernames between Windows and Unix accounts,
that's exactly how it's done (or CAN be done).

At my previous job, I was using Samba+Winbindd to allow Unix share access to
Windows/AD accounts; the file specified in the "username map"
parameter contained a bunch of entries like this:

# format: unixuser = windowsuser
PUNTR = rlpunt

and my samba parameter looked like this:

username map = /opt/etc/samba/users.map

HTH,
~rlp
>>> Mike Partyka <mpartyka@gmail.com> 12/31/2005 8:17:33 AM
>>>
I have joined samba to a 2003 active directory server.

If a samba shared dir is owned by root, how does active directory manage it?

more specifically, how are the permissions mapped? administrator to root?

i have seen reference to a parameter in smb.conf to "username map",
but i don't see reference to it in either of the John Terpstra Samba 
books so that can't be the bridge between windows and linux
permisssions.

TIA
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba 

-------------- next part --------------
-------------------------------------------------

This email transmission and any documents, files or previous

email messages attached to it may contain information that is

confidential or legally privileged. If you are not the intended

recipient, you are hereby notified that any disclosure, copying,

printing, distributing or use of this transmission is strictly

prohibited. If you have received this transmission in error,

please immediately notify the sender by telephone or return

email and delete the original transmission and its attachments

without reading or saving in any manner.



The Evangelical Lutheran Good Samaritan Society.

---------------------------------------------------------

Hmm, interesting, i wasn't sure the "username map" was necessary
when using
Winbind.

I can see how that would work, but it seems unecessary, since Winbind's
purpose is to make Active Directory users and groups appear to be local
users and groups, so permissions on a shares would be modified using chown &
chgrp and referring to the AD users in the form "DOMAIN\username"
(assuming
\ is your winbind separator and that your not also using "winbind default
domain") I am far from an expert on it at this point, so i am just sharing
how i believed it to work at this point.

Thanks for your response!

On 1/3/06, ryan punt <rpunt@good-sam.com> wrote:
>
> Actually, in the case of disparate usernames between Windows and Unix
> accounts, that's exactly how it's done (or CAN be done).
>
> At my previous job, I was using Samba+Winbindd to allow Unix share access
> to Windows/AD accounts; the file specified in the "username map"
parameter
> contained a bunch of entries like this:
>
> # format: unixuser = windowsuser
> PUNTR = rlpunt
>
> and my samba parameter looked like this:
>
> username map = /opt/etc/samba/users.map
>
>