Hi, I?m using samba rel.3.3.4. The domain group associated to the domain user is always 10000 that means ?Domain Users? for all the domain users $> getent passwd | grep pippo DOMAIN\pippo:*:10015:10000:PIPPO:/home/DOMAIN/pippo:/bin/false Do you know how is it possible to assign a different domain group ? How is it possible that winbindd intercepts another domain group instead of the default ?Domain Users? ? Thanks in advance, Edgardo Ghibaudo --http://www.provincia.biella.it------------------------------------------------------ Vuoi rimanere sempre aggiornato sulle nostre attivita'? Visita la pagina dei feed RSS sul nostro sito ed iscriviti alla sezione di interesse. --Avviso------------------------------------------------------------------------------ Questo messaggio e i suoi allegati sono riservati esclusivamente alle persone in indirizzo e possono contenere informazioni confidenziali. Se questo messaggio vi e' pervenuto per errore, vi informiamo che ogni suo uso e'proibito. In questo caso rispedite immediatamente il messaggio al mittente e cancellatelo. Per ogni chiarimento contattateci scrivendo a ced at provincia.biella.it. Grazie -Il Webmaster. --Warning----------------------------------------------------------------------------- This message and its attachments are addressed solely to the persons above and may contain confidential information. If you have received the message in error, be informed that any use of the content hereof is prohibited. Please return it immediately to the sender and delete the message. Should you have any questions, please contact us by replying to ced at provincia.biella.it. The Webmaster. --------------------------------------------------------------------------------------
Edgardo,
Which group is associated with gid 10000?
getent group|grep 10000
What gid has winbind assigned to "domain users"?
getent group|grep "domain users"
Dale
Edgardo Ghibaudo wrote:> Domain Type: Active Directory Windows 2000 Server
> smb.conf
> [global]
> workgroup = TEST
> realm = TEST
> server string = SRVBIND TEST-SITE (samba 3.3.4)
> security = ADS
> passdb backend = tdbsam
> load printers = No
> show add printer wizard = No
> idmap uid = 10000-200000
> idmap gid = 10000-200000
> winbind enum users = Yes
> winbind enum groups = Yes
> acl group control = Yes
> map acl inherit = Yes
> [comune]
> comment = DISCO COMUNE
> path = /home/comune
> valid users = @TEST\Everyone
> write list = @TEST\Everyone
> read only = No
> create mask = 0774
> directory mask = 0774
> follow symlinks = No
>
> nsswitch.conf
> passwd: compat winbind
> group: compat winbind
> shadow: compat
> hosts: files dns wins
> networks: files dns
> protocols: db files
> services: db files
> ethers: db files
> rpc: db files
> netgroup: nis
>
> Tnanks, Edgardo
> -----Messaggio originale-----
> Da: Dale Schroeder [mailto:dale at BriannasSaladDressing.com]
> Inviato: gioved? 13 agosto 2009 21.29
> A: Edgardo Ghibaudo
> Oggetto: Re: [Samba] winbindd & Domain group
>
> Winbind should get primary group information from the domain controller.
> Please provide domain type (AD, NT, Samba) and relevant parts of
> smb.conf and nsswitch.conf.
>
> Dale
>
> Edgardo Ghibaudo wrote:
>
>> Hi,
>> I'm using samba rel.3.3.4.
>> The domain group associated to the domain user is always 10000 that
means "Domain Users" for all the domain users
>> $> getent passwd | grep pippo
>> DOMAIN\pippo:*:10015:10000:PIPPO:/home/DOMAIN/pippo:/bin/false
>>
>> Do you know how is it possible to assign a different domain group ?
>> How is it possible that winbindd intercepts another domain group
instead of the default "Domain Users" ?
>>
>> Thanks in advance,
>> Edgardo Ghibaudo
>>