Fenal, Jérôme wrote:
Test user login name is ssi
The output of id -a ssi command is
uid=225(ssi) gid=1(other) groups=112(support),1000(users)
Nevertheless samba has found only 1 group (gid=1)
Ok, I don't see anything beside the following :
Define the right suffixes and ous (should be People&Group in Solaris 9) : ldap suffix = o=ot.ru,o=ot ldap user suffix = ou=People ldap group suffix = ou=Group
Try to remove : ldap filter = (&(uid=%u)(objectclass=sambaSamAccount)) to get the default : (uid=%u)
I've tested the settings above without any success.
Also double check that the SID for your groups are derived from the domain's one
I'm not sure I understand you right. I'm using the simplest configuration without domain but workgroup only with the only server - master browser. Just for the case I've mapped all group with type 2 (domane group)
Last thing, I remember having seen some problems with Solaris 9 nss_ldap
client due to Sun patches on the list this or last month. The bug seems to
be from Sun's fault. See :
Ok. I knew it. So, I'm using nss_ldap-211 from padl.com and it is definitely working good within Unix framework (id -a, ls -l... show right information). However according to the LDAP SERVER log file samba even do not request for supplementary groups. By the way samba log file level 10 I sent you also do not show any requests to LDAP for supplementary groups.
http://marc.theaimsgroup.com/?l=samba&m=107636136823095&w=2 and bug 395 (https://bugzilla.samba.org/show_bug.cgi?id=395). Please test the program in comment #19 and report.
Regards,
J.
This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.
-- Dmitry Monakhov System Administrator Open Technologies, tel: +7(095)787-7027 e-mail: [EMAIL PROTECTED], http://www.ot.ru/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
