samba - Aug 2016 - winbind use default domain change impact on ACLs?

Hello all!

I have a samba server as a member of a domain with trust relationships 
to two other domains.

Samba is configured with:
winbind use default domain = yes
winbind separator = +

so the domain samba is member of does not use the seperator, but the 
other 2 domains do.

If I change this to winbind use default domain = no ,will I have to 
update all the ACLs on the filesystem to include DOMAIN+username instead 
of just username?

Kind regards,
Coert

As computers love numbers, I expect that won't change anything if you are
using system ACLs: ACLs on disk should be set using number (UID/GID) rather
than names.
If you are using Samba only ACLs (with "acl_xattr:ignore system acls =
yes"
in smb.conf) I have no idea.

Anyway testing should not take much time, perhaps less than time needed to
answer you...

2016-08-06 19:32 GMT+02:00 Coert <lgroups at vlymskerp.net>:
> Hello all!
>
> I have a samba server as a member of a domain with trust relationships to
> two other domains.
>
> Samba is configured with:
> winbind use default domain = yes
> winbind separator = +
>
> so the domain samba is member of does not use the seperator, but the other
> 2 domains do.
>
> If I change this to winbind use default domain = no ,will I have to update
> all the ACLs on the filesystem to include DOMAIN+username instead of just
> username?
>
> Kind regards,
> Coert
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>