Hmm,

I'm having the same problem, and the quotes don't help.

I'm running 3.0.4 on RedHat with winbind & pam. Even set up /etc/pam.d/login per the docs.

please help

Mario


Hi, this worked for me:


valid users = '@DOMAINNAME\GROUP'

in my smb.conf I have valid users = '@DOMAINNAME\Domain Users' and I mapped
'Domain Users' to unixgroup domusers.

Hope this helps

Ciao







At 01:05 21/05/2004, Michael Andrewjeski wrote:

Hi,

I've a question about the syntax of the valid users option. Any help is greatly appreciated!

Here is the Background:

samba 3.0.4
Linux as Domain Member
Active Directory, not in Native Mode
Compiler opions: --with-winbind --with-pam --with-smbmount

The goal is to authenticate via the Windows Domain and allow access via Windows groups.

The syntax in my smb.conf looks like this:

valid users = DOMAIN\SOMEGROUP

However, it doesn't work no matter what.

I can authenticate individual users thusly:

valid users = DOMAIN\SOMEUSER

I've read about the "@" "+" and "&" syntax, but they only seem to represent Unix & Nis groups.

Is there another way to represent Windows groups? Or is my config the culprit? Here's the conf file:

 smb.conf:

[global]

# workgroup = NT-Domain-Name or Workgroup-Name
workgroup = DOMAIN

# WINS service
winbind uid = 10000-20000
winbind gid = 10000-20000
winbind enum users = yes
winbind enum groups = yes
wins server = XXX.XXX.XXX.XXX

password server = *

server string = SAMBA

log file = /var/log/samba/%m.log
max log size = 0
log level =  10

security = domain

auth methods = guest sam ntdomain



encrypt passwords = yes

local master = no

dns proxy = no

[SOMESHARE]
   comment = Some Share
   path = /d1/articles
   public = no
   writable = yes
   printable = no
   valid users = DOMAIN\SOMEGROUP

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba




--
Email.it, the professional e-mail, gratis per te: http://www.email.it/f

Sponsor:

Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=&d=21-5
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

_________________________________________________________________
Best Restaurant Giveaway Ever! Vote for your favorites for a chance to win $1 million! http://local.msn.com/special/giveaway.asp


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Reply via email to