Hi there I've just upgraded to 3.2.2 and it still looks like nested group support isn't finished? e.g. if I have "domain1/user1" in group "domain2/group1" and that in turn is in "domain3/group2" (i.e. domain1/user1 is in domain3/group2), then "getent group domain3/group2" should return domain1/user1 - and yet it doesn't. "winbind enum groups" is enabled if that matters (it didn't seem to make a difference) However, "id domain1/user1" does show that domain3/group2 is listed as one of that users groups - so it's working well in that direction...? Am I right, or have we got a problem that could actually be fixed? :-) This is under FC8. Thanks! -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
Gerald (Jerry) Carter
2008-Aug-27 20:50 UTC
[Samba] nested group support still broken in 3.2.2?
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Jason Haar wrote:> Hi there > > I've just upgraded to 3.2.2 and it still looks like nested group support > isn't finished? > > e.g. if I have "domain1/user1" in group "domain2/group1" and that in > turn is in "domain3/group2" (i.e. domain1/user1 is in domain3/group2), > then "getent group domain3/group2" should return domain1/user1 - and yet > it doesn't. "winbind enum groups" is enabled if that matters (it didn't > seem to make a difference) > > However, "id domain1/user1" does show that domain3/group2 is listed as > one of that users groups - so it's working well in that direction...? > > Am I right, or have we got a problem that could actually be fixed? :-) > This is under FC8.What is "winbind expand groups" set to ? cheers, jerry - -- ====================================================================Samba ------- http://www.samba.org Likewise Software --------- http://www.likewisesoftware.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFItb3iIR7qMdg1EfYRAuz6AJ9gOmDHWYGrJgQTvGZkzyhXzuW5vgCfXLje 0eUmatOrEzoRc8CrTCN5p4s=efXx -----END PGP SIGNATURE-----