search for: winibind

...who are members of groups in UNIX could not access directories or files, because SAMBA was only looking to AD for group membership listings. We do not maintain groups in AD, only in NIS/LDAP. We use winbind to map UIDs and GIDs in UNIX to SIDS to allow ACL control from Windows workstations. With winibind running the SAMBA server is ignoring UNIX permissions and using the Windows group definitions, which we don't maintain in AD. We have to maintain the groups in NIS/LDAP. So if we try to use the system like this all of our group definitions are broken. -- David Pullman