Rory Browne
2006-Sep-08 12:31 UTC
[Samba] Mapping all members of an AD group to a single unix username?
Hello all I've tried various permutations in the smbusers file ( referenced by username map ), to get all members of a Windows AD group to be able to authenticate to a Samba Share, mainly along the lines of DOMAIN\GroupName, but I can't figure out a way to get this to work. What I need is for any member of the DOMAIN\SambaGroup to authenticate to the Samba server as the unix user winuser. Any tips or pointers on this? I've exausted all perumtations I could think of in google, and various pages seem to suggest that this can be done, but don't say how. Rory
Felipe Augusto van de Wiel
2006-Sep-11 12:33 UTC
[Samba] Mapping all members of an AD group to a single unix username?
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 09/08/2006 09:30 AM, Rory Browne escreveu:> Hello allHi Rory,> I've tried various permutations in the smbusers file ( referenced by > username map ), to get all members of a Windows AD group to be able to > authenticate to a Samba Share, mainly along the lines of DOMAIN\GroupName, > but I can't figure out a way to get this to work. > > What I need is for any member of the DOMAIN\SambaGroup to authenticate to > the Samba server as the unix user winuser.So, let just me clear a few things: 1) Do you want your users to give the password of winuser? Or do you want that the owner of files and directory be 'winuser'? I'm asking that, because you could allow the access to the group and force the user to be 'winuser'.> Any tips or pointers on this? I've exausted all perumtations I could think > of in google, and various pages seem to suggest that this can be done, but > don't say how.I hope this helps.> RoryKind regards, - -- Felipe Augusto van de Wiel <felipe@paranacidade.org.br> Coordenadoria de Tecnologia da Informa??o (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFBVd1Cj65ZxU4gPQRAjPiAJwIZQkM7GOU0R3HfddtwoBcBdpV0ACgxyIv JYQhaLqRXOZ5ih0HmxEyEQk=DFVh -----END PGP SIGNATURE-----