Albrecht,

MYDOM is whatever you have as "WORKGROUP =".
If "_" is your separator then "@MYDOM_mygroup" would be what you need.
Our printers are open to all users for printing, so I can use either "guest ok = yes" or 
"public = yes".
Our "valid user" restrictions are on data files, and they work as expected in 
23c, so you should be able to restrict printer access as needed.
e.g. valid users = @"DOMAIN_Domain Users"
Fortunately, I had the luxury of using a test machine and did not upgrade 
production servers from 3.0.22 until 3.0.23c was released.

Dale


Albrecht Dress wrote:
Hi Dale:

I grabbed version 23c, built and installed it, but had no success so far...

Dale Schroeder <[EMAIL PROTECTED]> wrote:
The "valid users" directive was broken in 23a and 23b. You will need to upgrade to 23c or find another method of controlling access to your shares.
Also, the 23-series requires FQDN - "@DOM_grp" becomes "@DOMAIN\DOM_grp".

Maybe you can clarify this a little bit - When I log in into Winbloze, I use the
domain MYDOM.  In reality, this domain is called MYDOM.MYORG.COM.  The domain
has a group called mygroup.  From this, winbindd (using "_" as separator)
created the group "MYDOM_mygroup" which I used in the config file.  With the new
scheme, do I have to use "@MYDOM.MYORG.COM\mygroup", or is "@MYDOM\mygroup"
sufficient?

Apart from that, what is the /default/ access mode to the printers?  Maybe it
would be interesting to see where the printer access fails.  Any help is welcome
- this is really a show-stopper, and I don't want to make everybody an admin!

Cheers,
Albrecht

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to