samba - Dec 2022 - pam_winbind and home folders

On 12/16/22 17:12, Rowland Penny via samba wrote:
> The problem is that the users primary group is ignored, even if 
> explicitly set when using the 'ad' idmap backend. If the bug was 
> fixed, the computer 'users' could be ignored because their primary 
> group is Domain Computers. Something along the lines of: Ignore a user 
> if their primary group is Domain Computers, unless a switch is set in 
> smb.conf
in my opinion a user member of Domain Computer group should be ignored 
from users independently from his primary group. In other words I don't 
think that the bug of the right primary group should solve the problem 
that PCs are considered users. Do you think that migrating to ad idmap 
backend should solve the problem?

Any way I add my comment to the bug 
https://bugzilla.samba.org/show_bug.cgi?id=13371

Piviul

Mandi! Piviul via samba
  In chel di` si favelave...
> in my opinion a user member of Domain Computer group should be ignored 
> from users independently from his primary group.
No, this insted can be useful, because in some way SYSTEM bultin users use
the machine account user to do things, and 'doing things' on a
fileserver
need a UID.

I'm using AD backaend, and all my machine account have an UID.

-- 
  Io credo nella chimica tanto quanto Giulio Cesare credeva nel caso...
  mi va bene fino a quando non riguarda me :)	(Emanuele Pucciarelli)