samba - May 2006 - Unable to use 'valid users' from Active Directory

I am able to return users and groups using wbinfo -g and -u. Samaba will
even allow users to connect that are in our domain. The problem exist
while trying to narrow down permissions to a share.

[public]
   comment = Public Stuff
   path = /home/
   public = yes
   read only = no
   valid users = @"UFAD\_IFAS-FRE-USERS_autoGS"

This does not work. It prompts the end user for a username/password but
it won't take anything. A share like the following does work but doesn't
bother asking the end user for credentials because the username/password
is already been entered to login to the AD domain.

[homes]
   comment = %U Home Directory
   browseable = no
   path = %H
   valid users = %U
   writable = yes
   create mode = 0664
   directory mode = 0775

I have also attached my smb.conf incase I missed something else.

> I am able to return users and groups using wbinfo -g and -u. Samaba
> will even allow users to connect that are in our domain. The problem
> exist while trying to narrow down permissions to a share.
> 
> [public]
>    comment = Public Stuff
>    path = /home/
>    public = yes
>    read only = no
>    valid users = @"UFAD\_IFAS-FRE-USERS_autoGS"
Is this a group?  Have you tried with a specific user?  Did you try
removing the quotes?  This works for me:

  valid users = @DOMAIN\user

But I haven't tried it with an AD group.  If you can't get it to work
with an individual user then it's probably a problem with your
configuration.

Cheers,
Adam.

I tried that but the results are the same, I am still prompted to enter
a username and password, and it doesn't take. IMO it shouldn't even
prompt for a username/password because I am already logged in and
therefore authenticated against the domain.

I am getting a error when trying to access the share:

[2006/06/01 16:13:39, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username UFAD\IF-FRE-CETUS$ is invalid on this system

The username that it mentions is my computer name... 

I've attached my smb.conf in hopes that I am just missing something in
the configuration.

-----Original Message-----
From: Adam Nielsen [mailto:adam.nielsen@uq.edu.au] 
Sent: Wednesday, May 31, 2006 7:50 PM
To: Reese,Richard Stephen
Cc: samba@lists.samba.org
Subject: Re: [Samba] Unable to use 'valid users' from Active Directory
> I am able to return users and groups using wbinfo -g and -u. Samaba 
> will even allow users to connect that are in our domain. The problem 
> exist while trying to narrow down permissions to a share.
> 
> [public]
>    comment = Public Stuff
>    path = /home/
>    public = yes
>    read only = no
>    valid users = @"UFAD\_IFAS-FRE-USERS_autoGS"
Is this a group?  Have you tried with a specific user?  Did you try
removing the quotes?  This works for me:

  valid users = @DOMAIN\user

But I haven't tried it with an AD group.  If you can't get it to work
with an individual user then it's probably a problem with your
configuration.

Cheers,
Adam.

Ya I am running winbind, I have enabled the default domain, and tried not using
the domain prefix to login and no dice, it still just prompt me for a user/pass
combination.

-----Original Message-----
From: marcos rocha [mailto:mczueira@yahoo.com.br] 
Sent: Friday, June 02, 2006 7:38 AM
To: Adam Nielsen; Reese,Richard Stephen
Cc: samba@lists.samba.org
Subject: Re: [Samba] Unable to use 'valid users' from Active Directory


Hi,

are you using winbind ?
if sou enable winbind use default domain and use valid users without domain name
and winbind separator.

Marcos

--- Adam Nielsen <adam.nielsen@uq.edu.au> escreveu:
> > I tried that but the results are the same, I am
> still prompted to
> > enter a username and password, and it doesn't
> take. IMO it shouldn't
> > even prompt for a username/password because I am
> already logged in and
> > therefore authenticated against the domain.
> 
> OH, okay, I thought you *wanted* it to prompt for a username.  In that 
> case you'll only get a prompt if the credentials you're already
using
> are incorrect, i.e. you correctly logged into the domain, then you 
> connect to Samba and pass those same credentials on, Samba rejects the 
> credentials for whatever reason and then you get a prompt asking for a 
> valid username and password.
> 
> > I am getting a error when trying to access the
> share:
> > 
> > [2006/06/01 16:13:39, 1]
> smbd/sesssetup.c:reply_spnego_kerberos(250)
> >   Username UFAD\IF-FRE-CETUS$ is invalid on this
> system
> > 
> > The username that it mentions is my computer
> name... 
> 
> Which computer name is that?  If it's the Samba machine, it would 
> indicate that it hasn't correctly joined the domain.
>  Part of the
> process of joining a domain involves creating a computer account in 
> Active Directory, which is the account Samba uses when it connects to 
> the directory to retrieve a list of users/groups.
> 
> > I've attached my smb.conf in hopes that I am just
> missing something in
> > the configuration.
> 
> Almost none of the domain config is stored in smb.conf, it's all 
> updated dynamically in the binary data files when you run commands 
> like 'net join'.  You'll need to run things like "net
testjoin" etc.
> to try to figure out why wbinfo is working but smbd isn't.
> 
> Cheers,
> Adam.
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: 
> https://lists.samba.org/mailman/listinfo/samba
> 


		
_______________________________________________________
Novo Yahoo! Messenger com voz: Instale agora e fa?a liga??es de gra?a. 
http://br.messenger.yahoo.com/

It would act as if it's not seeing the credentials for the share that is
using the group specification.

So to summarize what going on:

The public share prompts for a username and password but does not take
one.

[public]
   comment = Public Stuff
   path = /home/
   public = yes
   read only = no
   valid users = @"_IFAS-FRE-USERS_autoGS"

A share that does not have the user requirement allows a Active
Direcotry user to login just fine.

[homes]
   comment = %U Home Directory
   browseable = no
   path = %H
   valid users = %U
   writable = yes
   create mode = 0664
   directory mode = 0775

-----Original Message-----
From: Adam Nielsen [mailto:adam.nielsen@uq.edu.au] 
Sent: Thursday, June 01, 2006 6:45 PM
To: Reese,Richard Stephen
Cc: samba@lists.samba.org
Subject: Re: [Samba] Unable to use 'valid users' from Active Directory
> I tried that but the results are the same, I am still prompted to 
> enter a username and password, and it doesn't take. IMO it
shouldn't
> even prompt for a username/password because I am already logged in and
> therefore authenticated against the domain.
OH, okay, I thought you *wanted* it to prompt for a username.  In that
case you'll only get a prompt if the credentials you're already using
are incorrect, i.e. you correctly logged into the domain, then you
connect to Samba and pass those same credentials on, Samba rejects the
credentials for whatever reason and then you get a prompt asking for a
valid username and password.
> I am getting a error when trying to access the share:
> 
> [2006/06/01 16:13:39, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
>   Username UFAD\IF-FRE-CETUS$ is invalid on this system
> 
> The username that it mentions is my computer name... 
Which computer name is that?  If it's the Samba machine, it would
indicate that it hasn't correctly joined the domain.  Part of the
process of joining a domain involves creating a computer account in
Active Directory, which is the account Samba uses when it connects to
the directory to retrieve a list of users/groups.
> I've attached my smb.conf in hopes that I am just missing something in
> the configuration.
Almost none of the domain config is stored in smb.conf, it's all updated
dynamically in the binary data files when you run commands like 'net
join'.  You'll need to run things like "net testjoin" etc. to
try to
figure out why wbinfo is working but smbd isn't.

Cheers,
Adam.

Best Regards, 
   Brandon Shelley

________________________________

From: Shelley, Brandon
Sent: Tue 6/6/2006 12:22 PM
To: Reese,Richard Stephen
Subject: RE: [Samba] Unable to use 'valid users' from Active Directory


Wow finally someone with my EXACT problem :)  Though no posts here are remotely
close to solving the problem.  I have also tried every other recommendation in
this posting, as well as many others.  The problem is that even though the
machine has been "net join"ed to a Windows domain, it does not want to
authenticate to the server.  DOMAIN\User | Password and User | Password
don't work... this says to me that is is an AD complication.  Our system
worked fine until an upgrade to SP1 on the DC, and soon thereafter, no one could
authenticate to the samba server via an AD account any longer.
 
 If anyone has ideas other than "you have to type net join etc." or
"upgrade to 3.0.14a" (when I, anyway, am using 3.0.22), I, and I'm
sure Richard would too, would sincerely appreciate it!
 
Thanks in advance, 
 
Best Regards, 
   Brandon Shelley

There are some issues with SP1 Server 2003 and samba. I'm able to auth
fine using samba and either kerberos or winbind. The only difference I
can really determine from our configs is that I have the winbind
seperator commented out so that DOMAIN\someuser works, unless I'm
missing something.
 

[global]
 
# workgroup = NT-Domain-Name or Workgroup-Name
   workgroup = UFAD
   realm = ADSERVER.UFL.EDU
# server string is the equivalent of the NT Description field
   server string = SERVER
 
   hosts allow = 10.242.
   load printers = no
 log file = /var/log/samba/%m.log
   max log size = 50
   security = ads
 
   idmap uid = 10000 - 20000
   idmap gid = 10000 - 20000
#winbind separator = +
winbind enum users=yes
winbind enum groups=yes
   template homedir = /home/win/%D/%U
   template shell = /bin/bash
client use spnego = yes
   winbind use default domain = yes
 
  encrypt passwords = yes
  smb passwd file = /etc/samba/smbpasswd
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
 

#============================ Share Definitions
=============================[homes]
   comment = %U Home Directory
   browseable = no
   path = %H
   valid users = %U
   writable = yes
   create mode = 0664
   directory mode = 0775
 
[public]
   comment = Public Stuff
   path = /home/
   public = yes
   read only = no
;   valid users = @"_IFAS-FRE-USERS_autoGS"
 
[citrus]
  path = /home/httpd/html/citrus
  public = no
  read only = no
  write list = vmsodek rsreese

________________________________

From: Shelley, Brandon [mailto:brandon.shelley@celcorp.com] 
Sent: Tuesday, June 06, 2006 12:23 PM
To: Reese,Richard Stephen
Subject: RE: [Samba] Unable to use 'valid users' from Active Directory


Wow finally someone with my EXACT problem :)  Though no posts here are
remotely close to solving the problem.  I have also tried every other
recommendation in this posting, as well as many others.  The problem is
that even though the machine has been "net join"ed to a Windows
domain,
it does not want to authenticate to the server.  DOMAIN\User | Password
and User | Password don't work... this says to me that is is an AD
complication.  Our system worked fine until an upgrade to SP1 on the DC,
and soon thereafter, no one could authenticate to the samba server via
an AD account any longer. 
 
 If anyone has ideas other than "you have to type net join etc." or
"upgrade to 3.0.14a" (when I, anyway, am using 3.0.22), I, and I'm
sure
Richard would too, would sincerely appreciate it!
 
Thanks in advance, 
 
Best Regards, 
   Brandon Shelley

I had the 'winbind use default domain = yes' enabled and was able to
retrieve user and group information via wbinfo but I still had the same problem.
It would let me specify a group and then let a user login. I can specify a user
though.

-----Original Message-----
From: marcos rocha [mailto:mczueira@yahoo.com.br] 
Sent: Thursday, June 08, 2006 7:12 AM
To: Reese,Richard Stephen; Shelley, Brandon
Cc: samba@lists.samba.org
Subject: RE: [Samba] Unable to use 'valid users' from Active Directory


Ho Reese,

i'm using the almost que same configuration but with something diferent.
i'm using win2k SP4 with valid users parameter pointing to users instead of
group. this is because winbind isn't solving simple win2k member's group
neigther nested win2k member's group.

my users use user | password to be validated instead of domain\user | password
because of winbind use default domain = yes parameter.

Marcos

--- "Reese,Richard Stephen" <rsreese@ufl.edu>
escreveu:
> There are some issues with SP1 Server 2003 and samba. I'm able to auth 
> fine using samba and either kerberos or winbind. The only difference I 
> can really determine from our configs is that I have the winbind 
> seperator commented out so that DOMAIN\someuser works, unless I'm 
> missing something.
>  
> 
> [global]
>  
> # workgroup = NT-Domain-Name or Workgroup-Name
>    workgroup = UFAD
>    realm = ADSERVER.UFL.EDU
> # server string is the equivalent of the NT Description field
>    server string = SERVER
>  
>    hosts allow = 10.242.
>    load printers = no
>  log file = /var/log/samba/%m.log
>    max log size = 50
>    security = ads
>  
>    idmap uid = 10000 - 20000
>    idmap gid = 10000 - 20000
> #winbind separator = +
> winbind enum users=yes
> winbind enum groups=yes
>    template homedir = /home/win/%D/%U
>    template shell = /bin/bash
> client use spnego = yes
>    winbind use default domain = yes
>  
>   encrypt passwords = yes
>   smb passwd file = /etc/samba/smbpasswd
>    socket options = TCP_NODELAY SO_RCVBUF=8192
> SO_SNDBUF=8192
>  
> 
> #============================ Share Definitions 
> ============================== [homes]
>    comment = %U Home Directory
>    browseable = no
>    path = %H
>    valid users = %U
>    writable = yes
>    create mode = 0664
>    directory mode = 0775
>  
> [public]
>    comment = Public Stuff
>    path = /home/
>    public = yes
>    read only = no
> ;   valid users = @"_IFAS-FRE-USERS_autoGS"
>  
> [citrus]
>   path = /home/httpd/html/citrus
>   public = no
>   read only = no
>   write list = vmsodek rsreese
> 
> ________________________________
> 
> From: Shelley, Brandon
> [mailto:brandon.shelley@celcorp.com]
> Sent: Tuesday, June 06, 2006 12:23 PM
> To: Reese,Richard Stephen
> Subject: RE: [Samba] Unable to use 'valid users'
> from Active Directory
> 
> 
> Wow finally someone with my EXACT problem :)  Though no posts here are 
> remotely close to solving the problem.  I have also tried every other 
> recommendation in this posting, as well as many others.  The problem 
> is that even though the machine has been "net join"ed to a
Windows
> domain, it does not want to authenticate to the server.
> DOMAIN\User | Password
> and User | Password don't work... this says to me that is is an AD 
> complication.  Our system worked fine until an upgrade to SP1 on the 
> DC, and soon thereafter, no one could authenticate to the samba server 
> via an AD account any longer.
>  
>  If anyone has ideas other than "you have to type net join etc."
or
> "upgrade to 3.0.14a" (when I, anyway, am using 3.0.22), I, and
I'm
> sure Richard would too, would sincerely appreciate it!
>  
> Thanks in advance,
>  
> Best Regards, 
>    Brandon Shelley
> 
> 
>  
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: 
> https://lists.samba.org/mailman/listinfo/samba
> 


		
_______________________________________________________
Abra sua conta no Yahoo! Mail: 1GB de espa?o, alertas de e-mail no celular e
anti-spam realmente eficaz.
http://mail.yahoo.com.br/

getent is only retrieving the local users and groups 

-----Original Message-----
From: marcos rocha [mailto:mczueira@yahoo.com.br] 
Sent: Thursday, June 08, 2006 9:40 PM
To: Reese,Richard Stephen; Shelley, Brandon
Cc: samba@lists.samba.org
Subject: RE: [Samba] Unable to use 'valid users' from Active Directory


does getent passwd retrieves all users ???
does getent group retrieves all groups ???
did you change /etc/nsswitch.conf ???
you need to add the winbind parameter to passwd and group



--- "Reese,Richard Stephen" <rsreese@ufl.edu>
escreveu:
> I had the 'winbind use default domain = yes' enabled and was able
to
> retrieve user and group information via wbinfo but I still had the 
> same problem. It would let me specify a group and then let a user 
> login. I can specify a user though.
> 
> -----Original Message-----
> From: marcos rocha [mailto:mczueira@yahoo.com.br]
> Sent: Thursday, June 08, 2006 7:12 AM
> To: Reese,Richard Stephen; Shelley, Brandon
> Cc: samba@lists.samba.org
> Subject: RE: [Samba] Unable to use 'valid users'
> from Active Directory
> 
> 
> Ho Reese,
> 
> i'm using the almost que same configuration but with something 
> diferent.
> i'm using win2k SP4 with valid users parameter pointing to users 
> instead of group. this is because winbind isn't solving simple win2k 
> member's group neigther nested win2k member's group.
> 
> my users use user | password to be validated instead of domain\user | 
> password because of winbind use default domain = yes parameter.
> 
> Marcos
> 
> --- "Reese,Richard Stephen" <rsreese@ufl.edu>
> escreveu:
> 
> > There are some issues with SP1 Server 2003 and
> samba. I'm able to auth
> > fine using samba and either kerberos or winbind.
> The only difference I
> > can really determine from our configs is that I
> have the winbind
> > seperator commented out so that DOMAIN\someuser
> works, unless I'm
> > missing something.
> >  
> > 
> > [global]
> >  
> > # workgroup = NT-Domain-Name or Workgroup-Name
> >    workgroup = UFAD
> >    realm = ADSERVER.UFL.EDU
> > # server string is the equivalent of the NT
> Description field
> >    server string = SERVER
> >  
> >    hosts allow = 10.242.
> >    load printers = no
> >  log file = /var/log/samba/%m.log
> >    max log size = 50
> >    security = ads
> >  
> >    idmap uid = 10000 - 20000
> >    idmap gid = 10000 - 20000
> > #winbind separator = +
> > winbind enum users=yes
> > winbind enum groups=yes
> >    template homedir = /home/win/%D/%U
> >    template shell = /bin/bash
> > client use spnego = yes
> >    winbind use default domain = yes
> >  
> >   encrypt passwords = yes
> >   smb passwd file = /etc/samba/smbpasswd
> >    socket options = TCP_NODELAY SO_RCVBUF=8192
> > SO_SNDBUF=8192
> >  
> > 
> > #============================ Share Definitions 
> > ============================== [homes]
> >    comment = %U Home Directory
> >    browseable = no
> >    path = %H
> >    valid users = %U
> >    writable = yes
> >    create mode = 0664
> >    directory mode = 0775
> >  
> > [public]
> >    comment = Public Stuff
> >    path = /home/
> >    public = yes
> >    read only = no
> > ;   valid users = @"_IFAS-FRE-USERS_autoGS"
> >  
> > [citrus]
> >   path = /home/httpd/html/citrus
> >   public = no
> >   read only = no
> >   write list = vmsodek rsreese
> > 
> > ________________________________
> > 
> > From: Shelley, Brandon
> > [mailto:brandon.shelley@celcorp.com]
> > Sent: Tuesday, June 06, 2006 12:23 PM
> > To: Reese,Richard Stephen
> > Subject: RE: [Samba] Unable to use 'valid users'
> > from Active Directory
> > 
> > 
> > Wow finally someone with my EXACT problem :)
> Though no posts here are
> > remotely close to solving the problem.  I have
> also tried every other
> > recommendation in this posting, as well as many
> others.  The problem
> > is that even though the machine has been "net
> join"ed to a Windows
> > domain, it does not want to authenticate to the
> server.
> > DOMAIN\User | Password
> > and User | Password don't work... this says to me
> that is is an AD
> > complication.  Our system worked fine until an
> upgrade to SP1 on the
> > DC, and soon thereafter, no one could authenticate
> to the samba server
> > via an AD account any longer.
> >  
> >  If anyone has ideas other than "you have to type
> net join etc." or
> > "upgrade to 3.0.14a" (when I, anyway, am using
> 3.0.22), I, and I'm
> > sure Richard would too, would sincerely appreciate
> it!
> >  
> > Thanks in advance,
> >  
> > Best Regards, 
> >    Brandon Shelley
> > 
> > 
> >  
> > --
> > To unsubscribe from this list go to the following
> URL and read the
> > instructions: 
> > https://lists.samba.org/mailman/listinfo/samba
> > 
> 
> 
> 
> 		
>
_______________________________________________________
> Abra sua conta no Yahoo! Mail: 1GB de espa?o, alertas de e-mail no 
> celular e anti-spam realmente eficaz.
> http://mail.yahoo.com.br/
> 

__________________________________________________
Fale com seus amigos  de gra?a com o novo Yahoo! Messenger
http://br.messenger.yahoo.com/

I used '# net ads join -U someadminusername' which joins just fine.

wbinfo -g and -u is working fine and will retrieve Active Directory username and
passwords.

For the logfile of my machine:
[2006/06/12 16:25:42, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username UFAD\IF-FRE-CETUS$ is invalid on this system

In the winbind log I am getting some strange errors also. There were hundreds of
these group messages which pretty much say that it's have problems looking
up some of the Active Directory groups.
[2006/06/12 16:23:48, 1] nsswitch/winbindd_group.c:winbindd_getgrent(703)
  could not look up gid for group OUR Phone Issues

Here's one that I believe is related to my AD username.
[2006/06/12 16:25:38, 1] nsswitch/winbindd_user.c:winbindd_fill_pwent(50)
  error getting user id for sid S-1-5-21-1308237860-4193317556-336787646-241755 

-----Original Message-----
From: marcos rocha [mailto:mczueira@yahoo.com.br] 
Sent: Monday, June 12, 2006 4:16 PM
To: Reese,Richard Stephen; Shelley, Brandon
Cc: samba@lists.samba.org
Subject: RE: [Samba] Unable to use 'valid users' from Active Directory


Hi Reese,

did you use net join to your samba server to the windows domain ???
did you see the samba's log ???
did you see the winbind's log ???


Marcos

--- "Reese,Richard Stephen" <rsreese@ufl.edu>
escreveu:
> getent is only retrieving the local users and groups
> 
> 
> -----Original Message-----
> From: marcos rocha [mailto:mczueira@yahoo.com.br]
> Sent: Thursday, June 08, 2006 9:40 PM
> To: Reese,Richard Stephen; Shelley, Brandon
> Cc: samba@lists.samba.org
> Subject: RE: [Samba] Unable to use 'valid users'
> from Active Directory
> 
> 
> does getent passwd retrieves all users ???
> does getent group retrieves all groups ???
> did you change /etc/nsswitch.conf ???
> you need to add the winbind parameter to passwd and group
> 
> 
> 
> --- "Reese,Richard Stephen" <rsreese@ufl.edu>
> escreveu:
> 
> > I had the 'winbind use default domain = yes'
> enabled and was able to
> > retrieve user and group information via wbinfo but
> I still had the
> > same problem. It would let me specify a group and
> then let a user
> > login. I can specify a user though.
> > 
> > -----Original Message-----
> > From: marcos rocha [mailto:mczueira@yahoo.com.br]
> > Sent: Thursday, June 08, 2006 7:12 AM
> > To: Reese,Richard Stephen; Shelley, Brandon
> > Cc: samba@lists.samba.org
> > Subject: RE: [Samba] Unable to use 'valid users'
> > from Active Directory
> > 
> > 
> > Ho Reese,
> > 
> > i'm using the almost que same configuration but
> with something
> > diferent.
> > i'm using win2k SP4 with valid users parameter
> pointing to users
> > instead of group. this is because winbind isn't
> solving simple win2k
> > member's group neigther nested win2k member's
> group.
> > 
> > my users use user | password to be validated
> instead of domain\user |
> > password because of winbind use default domain > yes parameter.
> > 
> > Marcos
> > 
> > --- "Reese,Richard Stephen" <rsreese@ufl.edu>
> > escreveu:
> > 
> > > There are some issues with SP1 Server 2003 and
> > samba. I'm able to auth
> > > fine using samba and either kerberos or winbind.
> > The only difference I
> > > can really determine from our configs is that I
> > have the winbind
> > > seperator commented out so that DOMAIN\someuser
> > works, unless I'm
> > > missing something.
> > >  
> > > 
> > > [global]
> > >  
> > > # workgroup = NT-Domain-Name or Workgroup-Name
> > >    workgroup = UFAD
> > >    realm = ADSERVER.UFL.EDU
> > > # server string is the equivalent of the NT
> > Description field
> > >    server string = SERVER
> > >  
> > >    hosts allow = 10.242.
> > >    load printers = no
> > >  log file = /var/log/samba/%m.log
> > >    max log size = 50
> > >    security = ads
> > >  
> > >    idmap uid = 10000 - 20000
> > >    idmap gid = 10000 - 20000
> > > #winbind separator = +
> > > winbind enum users=yes
> > > winbind enum groups=yes
> > >    template homedir = /home/win/%D/%U
> > >    template shell = /bin/bash
> > > client use spnego = yes
> > >    winbind use default domain = yes
> > >  
> > >   encrypt passwords = yes
> > >   smb passwd file = /etc/samba/smbpasswd
> > >    socket options = TCP_NODELAY SO_RCVBUF=8192
> > > SO_SNDBUF=8192
> > >  
> > > 
> > > #============================ Share Definitions 
> > > ============================== [homes]
> > >    comment = %U Home Directory
> > >    browseable = no
> > >    path = %H
> > >    valid users = %U
> > >    writable = yes
> > >    create mode = 0664
> > >    directory mode = 0775
> > >  
> > > [public]
> > >    comment = Public Stuff
> > >    path = /home/
> > >    public = yes
> > >    read only = no
> > > ;   valid users = @"_IFAS-FRE-USERS_autoGS"
> > >  
> > > [citrus]
> > >   path = /home/httpd/html/citrus
> > >   public = no
> > >   read only = no
> > >   write list = vmsodek rsreese
> > > 
> > > ________________________________
> > > 
> > > From: Shelley, Brandon
> > > [mailto:brandon.shelley@celcorp.com]
> > > Sent: Tuesday, June 06, 2006 12:23 PM
> > > To: Reese,Richard Stephen
> > > Subject: RE: [Samba] Unable to use 'valid users'
> > > from Active Directory
> > > 
> > > 
> > > Wow finally someone with my EXACT problem :)
> > Though no posts here are
> > > remotely close to solving the problem.  I have
> > also tried every other
> > > recommendation in this posting, as well as many
> > others.  The problem
> > > is that even though the machine has been "net
> > join"ed to a Windows
> > > domain, it does not want to authenticate to the
> > server.
> > > DOMAIN\User | Password
> > > and User | Password don't work... this says to
> me
> > that is is an AD
> > > complication.  Our system worked fine until an
> > upgrade to SP1 on the
> > > DC, and soon thereafter, no one could
> authenticate
> > to the samba server
> > > via an AD account any longer.
> > >  
> > >  If anyone has ideas other than "you have to
> type
> > net join etc." or
> > > "upgrade to 3.0.14a" (when I, anyway, am using
> > 3.0.22), I, and I'm
> > > sure Richard would too, would sincerely
> appreciate
> > it!
> > >  
> > > Thanks in advance,
> > >  
> > > Best Regards, 
> > >    Brandon Shelley
> > > 
> > > 
> > >  
> > > --
> > > To unsubscribe from this list go to the
> following
> > URL and read the
> > > instructions: 
> > > https://lists.samba.org/mailman/listinfo/samba
> > > 
> > 
> > 
> > 
> > 		
> >
>
_______________________________________________________
> > Abra sua conta no Yahoo! Mail: 1GB de espa?o,
> alertas de e-mail no
> > celular e anti-spam realmente eficaz.
> > http://mail.yahoo.com.br/
> > 
> 
> 
> __________________________________________________
> Fale com seus amigos  de gra?a com o novo Yahoo!
> Messenger http://br.messenger.yahoo.com/
> 

__________________________________________________
Fale com seus amigos  de gra?a com o novo Yahoo! Messenger 
http://br.messenger.yahoo.com/