Remote access by group

[angelshark]

Hello,


I would like to configure remote access on clients using groups instead of users or machines. Even though the online help states that you can allow access to a group by using the syntax "group=groupname" I can not get this to work in my server.

Anyone got any ideas?

Thanks for your help.

 

[605]

What about group@hostname or group@domain ?

 

[angelshark]

That didn't work either. Thanks anyway.

 

[wamason]

Does anyone have an answer for this? I have the exact sme problem.

 

[ptwork]

The way I read the manual, syntax for groups is different than we are used to, try &<groupname>, example in the book is &netadmins

Haven't tried it myself so let me know if it works!
pt

 

[DavinaTreiber]

The group@host and group@domain are problematic, I have not been able to make them work for Active Directory groups although they worked for old NT4 domains. The new style user specification is superior to the old @ style in any case because the @ style is ambiguous and hence insecure. These are the unambiguous formats I have had success with so far:

user=abc,domain=def
user=abc,host=ghi

I think that the SID specification will also work. I haven't been able to get any group based specifications to work well. I have also found a difference between groups defined on NT4 servers and on Active Directory groups.

ptwork's comment is interesting. I might have to do a little more testing.