Samba/Winbind "Domain Users" group missing

[LeeMason]

I have Samba 2.2.7 and have configured Winbind to allow usernames and passwords from a Windows NT Domain to be used for Linux logon and file protections. This works great and I can set file protections using NT usernames and groups as well as using NT usernames to logon to Linux (though SSH, KDE, etc).

My one single problem is that the 'Domain Users' group is acting really strange. For example, I have set Winbind to use group numbers 10000-20000 for NT users ( winbind gid = 10000-20000) and when I use the "getent group" command I see the Linux groups, followed by the NT groups (inc. "Domain Users" which is given a GID of 10000), but if I do 'getent group "Domain Users"' is fails to see the group. All other groups work fine.

Also, when a file is created by a user on the Linux server and they have a Windows NT default group of "Domain Users" the file is created with owner of the correct NT username, but when you do 'ls -l' against the file the group is listed only by number (i.e. 10000). All other groups are listed by name (i.e. 'Domain Admins').

We have about 1000 user accounts in the domain, so this may be a problem as they will all be in 'Domain Users' but any other ideals would be welcome.

Thanks,

Lee.

 

[clonny2]

I think there is a bug already filed to the samba team about this.

 

[LeeMason]

Thanks very much.

Lee.

 

[ChristophePicky]

Where can I read about this bug from the samba team.

 

[clonny2]

try checking on

http://www.samba.org.

I am not sure if bugzilla has public read or not.

>---------------------------------------Lawrence Feldman
SR. QA. Engineer SNAP Appliance
lfeldman@snapappliance.com

 

[ChristophePicky]

Thus anybody know documentation to establish a LinuxSamba CVS server
with wincvs clients over SSH I' m able to share a map with authentication
by the Windows PDC but is it possible to authenticate user within
wincvs against the PDC through the Samba CVS server
Thanks in advance

 

[LeeMason]

I think that you would be best to create a new thread for this one.

Lee.