samba - Feb 2018 - I can not use a domain group in the DC filesystem

I have just installed a samba 4.7.4 from source. All right!

wbinfo -u  and wbinfo -g return the list of users and groups from the domain

But I can not use they in the DC filesystem.

For instance:

# touch ttt

# chgrp 'domain admins' ttt
chgrp: invalid group: ‘domain admins’


That should I do to ?

On Wed, 7 Feb 2018 13:12:09 -0500
Denis Morejon via samba <samba at lists.samba.org> wrote:
> I have just installed a samba 4.7.4 from source. All right!
> 
> wbinfo -u  and wbinfo -g return the list of users and groups from the
> domain
> 
> But I can not use they in the DC filesystem.
> 
> For instance:
> 
> # touch ttt
> 
> # chgrp 'domain admins' ttt
> chgrp: invalid group: ‘domain admins’
> 
> 
> That should I do to ?
> 
> 
I must have said this a thousand times, just because 'wbinfo -u' &
'wbinfo -g' work doesn't mean that the underlying Unix OS knows the
AD
users and groups.

You don't say how you are using Samba, but I think you need to read
these:

https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller#Using_the_Domain_Controller_as_a_File_Server

https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member

Hi Denis,
> I have just installed a samba 4.7.4 from source. All right!
>
> wbinfo -u  and wbinfo -g return the list of users and groups from the
> domain
>
> But I can not use they in the DC filesystem.
>
> For instance:
>
> # touch ttt
>
> # chgrp 'domain admins' ttt
> chgrp: invalid group: ‘domain admins’
First, you need to configure nsswitch to have samba users available to 
the linux subsystem (/etc/nsswitch.conf).

Second, winbind idmap on DC is not done the same way as on member 
server. Unless you are seeking pain and tears, I would advise you to 
separate the domain controller and the fileserver.

Cheers,

Denis



>
>
> That should I do to ?
>
>
-- 
Denis Cardon
Tranquil IT Systems
Les Espaces Jules Verne, bâtiment A
12 avenue Jules Verne
44230 Saint Sébastien sur Loire
tel : +33 (0) 2.40.97.57.55
http://www.tranquil.it

Samba install wiki for Frenchies : https://dev.tranquil.it
WAPT, software deployment made easy : https://wapt.fr