Re: [Samba] Samba 3.0 as Active Directory Domain Controller withMIT Kerberos

2003-10-12 Thread Rich Webb

- Original Message - 
From: John H Terpstra [EMAIL PROTECTED]
To: Jane Deer [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Sunday, October 12, 2003 3:38 PM


 What is inaccurate please? I am ready to fix it!


You are apparently one of the authors of the samba HOWTO collection.  I
would just first like to say thank you for an awesome document.  It helped
immensly for resolving my weekend of hair pulling.

I was wondering if perhaps you could add something in the winbind section
about how to configure a samba share using NT or 2k domain groups.  I found
out the hard way that if I leave the configuration directive winbind use
default domain = yes then I cannot in any way specify a domain group as the
valid users for a share (unless there is a way that I don't know).  I tried
just the group name, I tried the domain name+group name, then I removed the
+ as the seperator and tried domain name\group name.  Nothing worked.  Once
I removed the use default domain directive, I was able to fully specify a
group and it worked great!  This just means that logging into the linux box
as a windows user is a little more painful.

Rich.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0 as Active Directory Domain Controller withMIT Kerberos

2003-10-12 Thread Andrew Bartlett
On Mon, 2003-10-13 at 07:46, Rich Webb wrote:
 - Original Message - 
 From: John H Terpstra [EMAIL PROTECTED]
 To: Jane Deer [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Sent: Sunday, October 12, 2003 3:38 PM
 
 
  What is inaccurate please? I am ready to fix it!
 
 
 You are apparently one of the authors of the samba HOWTO collection.  I
 would just first like to say thank you for an awesome document.  It helped
 immensly for resolving my weekend of hair pulling.
 
 I was wondering if perhaps you could add something in the winbind section
 about how to configure a samba share using NT or 2k domain groups.  I found
 out the hard way that if I leave the configuration directive winbind use
 default domain = yes then I cannot in any way specify a domain group as the
 valid users for a share (unless there is a way that I don't know).  I tried
 just the group name, I tried the domain name+group name, then I removed the
 + as the seperator and tried domain name\group name.  Nothing worked.  

Did you try:

@group

Also, check with the current code, I think there were some bugs fixed
here.  But this isn't a documentation flaw, it's just a bug - file it in
bugzilla.samba.org if you can reproduce on 3.0.1pre1.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 3.0 as Active Directory Domain Controller withMIT Kerberos

2003-10-12 Thread John H Terpstra
On Sun, 12 Oct 2003, Rich Webb wrote:


 - Original Message -
 From: John H Terpstra [EMAIL PROTECTED]
 To: Jane Deer [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Sent: Sunday, October 12, 2003 3:38 PM


  What is inaccurate please? I am ready to fix it!
 

 You are apparently one of the authors of the samba HOWTO collection.  I
 would just first like to say thank you for an awesome document.  It helped
 immensly for resolving my weekend of hair pulling.

Yes, correct. Glad to hear it helped.

 I was wondering if perhaps you could add something in the winbind section
 about how to configure a samba share using NT or 2k domain groups.  I found
 out the hard way that if I leave the configuration directive winbind use
 default domain = yes then I cannot in any way specify a domain group as the
 valid users for a share (unless there is a way that I don't know).  I tried
 just the group name, I tried the domain name+group name, then I removed the
 + as the seperator and tried domain name\group name.  Nothing worked.  Once
 I removed the use default domain directive, I was able to fully specify a
 group and it worked great!  This just means that logging into the linux box
 as a windows user is a little more painful.

I plan to update the winbind section significantly over the next month or
two. Thanks for the input.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0 as Active Directory Domain Controller withMIT Kerberos

2003-10-12 Thread Rich Webb
 I plan to update the winbind section significantly over the next month or
 two. Thanks for the input.



Just to let you know, per Andrew Bartlett I tried the newest version
(3.0.1pre1) and it fixes the problem I talked about.  I can now just specify
the group and use the winbind use default domain=yes


Rich

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba