Cristian Saavedra
2013-Apr-04 14:45 UTC
[Samba] getent group and net ads user info differs
Hello
I have a samba 4.0.3 pdc and a samba 3.5.10 as a fileserver and i am having an
issue that i like to share with you.
I have a share son the samba 3 setup like this
[Comercial]
browsable = Yes
comment = Comercial
path = /shares2/Comercial
valid users = @Ingenieria, @Mercadeo, @Comercial, @SIIF, @Costos,
administrador, backup
write list = @Comercial, @Mercadeo, @Ingenieria, administrador,
claudiavillegas, manuelaparicio
read list = @Comercial, @SIIF, , at Almacen, @Costos, @Uruguay,
@Ingenieria, backup
force create mode = 666
force directory mode = 777
veto files = /*.exe/*.com/*.dll/*.mp3/*.bat/
As you can see the Comercial group is authorized to read and write, so i have
this user lisanyurimicolta she is on the Comercial group:
[root at srvfs audit]# net ads user info lisanyurimicolta
Domain Users
TerminalServer
politicas3
SIIF
Comercial
[root at srvfs audit]#
srvfs is my samba 3.x server, but then she can't write on the share, so
i'm executing a getent group to validate that she is on that group for the
winbind, but i get this
[root at srvfs audit]# getent group comercial
comercial:*:16777233:claralibreros,christiancano,danilocampo,anabedoya,guillerminagarcia,humbertocardona,marthamurillo,pruebas,yoancanabal,andreasaa,adrianazapata,jhonrealpe,maryamgamboa,jassonaperador,adolfotrullo,christhianjimenez,mariaguerrero,mariomunera,mauricioperdomo,melbaorejuela,paolagomez,richardordonez,ginagarces,juanagudelo,adrianalopez,andrespossu,dianaolano,yulymejia,edwinyepes,jenniferbazantes,ronaldduque,maribelgomez,linabanol,lauramulcue,johncastillo,luzgallego,giovannysotomayor,andresgutierrez,arlexcardona,jonathangaviria,victorianavia,andrescampino
Why is this happening? any suggestions?
Thanks for your help.
Cristian Saavedra
2013-Apr-04 17:24 UTC
[Samba] getent group and net ads user info differs
Hello Kevin The group is on the samba AD and i don't have nis installed on this server, the nsswitch.conf is this. passwd: files winbind shadow: files winbind group: files winbind My OS is Centos 6.3 El 4/04/2013, a las 10:42, "Shaw, Kevin" <Kevin.Shaw at xerox.com> escribi?:> Cristian, > > The group commercial is in /etc/group or NIS group? > > cat /etc/group | grep lisanyurimicolta > > ypcat -k group | grep lisanyurimicolta > > If group is configured correctly I would look at /etc/nsswitch.conf. I don't know what OS you are running, this is where name switching is configured in Solaris. > > HTH, > > -Kevin > > -----Original Message----- > From: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] On Behalf Of Cristian Saavedra > Sent: Thursday, April 04, 2013 7:45 AM > To: samba at lists.samba.org > Subject: [Samba] getent group and net ads user info differs > > Hello > > I have a samba 4.0.3 pdc and a samba 3.5.10 as a fileserver and i am having an issue that i like to share with you. > > I have a share son the samba 3 setup like this > > [Comercial] > browsable = Yes > comment = Comercial > path = /shares2/Comercial > valid users = @Ingenieria, @Mercadeo, @Comercial, @SIIF, @Costos, administrador, backup > write list = @Comercial, @Mercadeo, @Ingenieria, administrador, claudiavillegas, manuelaparicio > read list = @Comercial, @SIIF, , at Almacen, @Costos, @Uruguay, @Ingenieria, backup > force create mode = 666 > force directory mode = 777 > veto files = /*.exe/*.com/*.dll/*.mp3/*.bat/ > > As you can see the Comercial group is authorized to read and write, so i have this user lisanyurimicolta she is on the Comercial group: > > [root at srvfs audit]# net ads user info lisanyurimicolta > Domain Users > TerminalServer > politicas3 > SIIF > Comercial > [root at srvfs audit]# > > srvfs is my samba 3.x server, but then she can't write on the share, so i'm executing a getent group to validate that she is on that group for the winbind, but i get this > > [root at srvfs audit]# getent group comercial > comercial:*:16777233:claralibreros,christiancano,danilocampo,anabedoya,guillerminagarcia,humbertocardona,marthamurillo,pruebas,yoancanabal,andreasaa,adrianazapata,jhonrealpe,maryamgamboa,jassonaperador,adolfotrullo,christhianjimenez,mariaguerrero,mariomunera,mauricioperdomo,melbaorejuela,paolagomez,richardordonez,ginagarces,juanagudelo,adrianalopez,andrespossu,dianaolano,yulymejia,edwinyepes,jenniferbazantes,ronaldduque,maribelgomez,linabanol,lauramulcue,johncastillo,luzgallego,giovannysotomayor,andresgutierrez,arlexcardona,jonathangaviria,victorianavia,andrescampino > > Why is this happening? any suggestions? > > Thanks for your help. > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba
Hai, maybe im wrong, but.. net ads user info lisanyurimicolta>Domain Users >TerminalServer >politicas3 >SIIF >Comercial Comercial...getent group comercial Capital C ? so 2 different groups is what your talking about. Greetz, Louis>-----Oorspronkelijk bericht----- >Van: csg at asualcance.com [mailto:samba-bounces at lists.samba.org] >Namens Cristian Saavedra >Verzonden: donderdag 4 april 2013 16:45 >Aan: samba at lists.samba.org >Onderwerp: [Samba] getent group and net ads user info differs > >Hello > >I have a samba 4.0.3 pdc and a samba 3.5.10 as a fileserver >and i am having an issue that i like to share with you. > >I have a share son the samba 3 setup like this > >[Comercial] > browsable = Yes > comment = Comercial > path = /shares2/Comercial > valid users = @Ingenieria, @Mercadeo, @Comercial, >@SIIF, @Costos, administrador, backup > write list = @Comercial, @Mercadeo, @Ingenieria, >administrador, claudiavillegas, manuelaparicio > read list = @Comercial, @SIIF, , at Almacen, @Costos, >@Uruguay, @Ingenieria, backup > force create mode = 666 > force directory mode = 777 > veto files = /*.exe/*.com/*.dll/*.mp3/*.bat/ > >As you can see the Comercial group is authorized to read and >write, so i have this user lisanyurimicolta she is on the >Comercial group: > >[root at srvfs audit]# net ads user info lisanyurimicolta >Domain Users >TerminalServer >politicas3 >SIIF >Comercial >[root at srvfs audit]# > >srvfs is my samba 3.x server, but then she can't write on the >share, so i'm executing a getent group to validate that she is >on that group for the winbind, but i get this > >[root at srvfs audit]# getent group comercial >comercial:*:16777233:claralibreros,christiancano,danilocampo,anabedoya,guillerminagarcia,humbertocardona,marthamurillo,pruebas,yo>ancanabal,andreasaa,adrianazapata,jhonrealpe,maryamgamboa,jasso>naperador,adolfotrullo,christhianjimenez,mariaguerrero,mariomun >era,mauricioperdomo,melbaorejuela,paolagomez,richardordonez,gin >agarces,juanagudelo,adrianalopez,andrespossu,dianaolano,yulymej >ia,edwinyepes,jenniferbazantes,ronaldduque,maribelgomez,linaban >ol,lauramulcue,johncastillo,luzgallego,giovannysotomayor,andres >gutierrez,arlexcardona,jonathangaviria,victorianavia,andrescampino > >Why is this happening? any suggestions? > >Thanks for your help. >-- >To unsubscribe from this list go to the following URL and read the >instructions: https://lists.samba.org/mailman/options/samba > >