Have you defined the Samba SID for the new group you created?
Are the base SID equal to that in the Samba domain?
On 9/24/06, Matthew Thompson <[EMAIL PROTECTED]> wrote:
Hi samba gurus,
I have a successful install of samba/LDAP (on FC5) and am looking at
applying security templates for different groups.
I had this successfully working on my old RH9 box running samba (but not
using LDAP). Using poledit, I created groups (sales, it, etc) that were
the same as my linux groups, and created a Ntconfig.POL file.
Referring to this article for use on poledit.exe and applying a security
template to a samba domain:
http://wiki.samba.org/index.php/Implementing_System_Policies_with_Samba
On the new setup, when I create new groups using the smbldap-tools, all
appears to be correct. My user can join that group and it shows up with
'id' and 'getent group'.
My problem is with poledit.exe... when I create groups (for the purpose
of applying security settings to my different groups) it seems as if
they don't pickup the newly created groups within my LDAP directory.
When I make changes to the "default users" group, those settings do
apply, but any settings made to the newly created group does not. This
to me would rule out a permission issue on the *.POL file.
There is as setting within poledit.exe where you can browse for groups
within the domain. I cannot view any non default groups (as in the ones
I created after smbldap-populate - it, sales, etc). I thought that this
may have had something to do with it, however, my old RH9 box cannot
view additional groups either, and it worked.
I'm new to Linux and samba/LDAP - so I'm not exactly sure whether I'm
asking the right people. However, I thought I start with you guys and
progress further if need be.
Thanks for you time and thoughts on this.
Regards
Matthew Thompson
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
--
***
Cleber P. de Souza
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba