Denis Morejon
2018-Feb-07 18:12 UTC
[Samba] I can not use a domain group in the DC filesystem
I have just installed a samba 4.7.4 from source. All right! wbinfo -u and wbinfo -g return the list of users and groups from the domain But I can not use they in the DC filesystem. For instance: # touch ttt # chgrp 'domain admins' ttt chgrp: invalid group: ‘domain admins’ That should I do to ?
Rowland Penny
2018-Feb-08 08:55 UTC
[Samba] I can not use a domain group in the DC filesystem
On Wed, 7 Feb 2018 13:12:09 -0500 Denis Morejon via samba <samba at lists.samba.org> wrote:> I have just installed a samba 4.7.4 from source. All right! > > wbinfo -u and wbinfo -g return the list of users and groups from the > domain > > But I can not use they in the DC filesystem. > > For instance: > > # touch ttt > > # chgrp 'domain admins' ttt > chgrp: invalid group: ‘domain admins’ > > > That should I do to ? > >I must have said this a thousand times, just because 'wbinfo -u' & 'wbinfo -g' work doesn't mean that the underlying Unix OS knows the AD users and groups. You don't say how you are using Samba, but I think you need to read these: wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller#Using_the_Domain_Controller_as_a_File_Server wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member
Denis Cardon
2018-Feb-08 10:04 UTC
[Samba] I can not use a domain group in the DC filesystem
Hi Denis,> I have just installed a samba 4.7.4 from source. All right! > > wbinfo -u and wbinfo -g return the list of users and groups from the > domain > > But I can not use they in the DC filesystem. > > For instance: > > # touch ttt > > # chgrp 'domain admins' ttt > chgrp: invalid group: ‘domain admins’First, you need to configure nsswitch to have samba users available to the linux subsystem (/etc/nsswitch.conf). Second, winbind idmap on DC is not done the same way as on member server. Unless you are seeking pain and tears, I would advise you to separate the domain controller and the fileserver. Cheers, Denis> > > That should I do to ? > >-- Denis Cardon Tranquil IT Systems Les Espaces Jules Verne, bâtiment A 12 avenue Jules Verne 44230 Saint Sébastien sur Loire tel : +33 (0) 2.40.97.57.55 tranquil.it Samba install wiki for Frenchies : dev.tranquil.it WAPT, software deployment made easy : wapt.fr