search for: sc1_main

...d groups = yes winbind use default domain = true winbind offline logon = false dns forwarder = 10.0.118.2 idmap_ldb:use rfc2307 = yes They are either default settings, deprecated or just plain shouldn't be in a Unix domain members smb.conf You also have in the [sc1_main] share: writeable = yes read only = no You only need one, I am sure if you look hard enough at those lines, you will realise they mean the same thing ;-) We now come to your real problem, where did you get this from ? idmap backend = idmap_rid:VHH=10000-100000000 I would...

Hi, we have some Samba shares joined a existing Windows AD. Everything works well with complex user rights. But the problem ist that when a user creates a new file the standard windows group (domain-user) is also applied as a permission to the file. This breaks all the security because all users have now full acess to this file. (because all users are in the domain-user group) All parent