[Samba] Problem with LDAP groups and associated file permissions

2006-12-14 Thread Manuel Graumann
Hi folks! Our smb with LDAP PDC now seems to be nearly completed. Just now we found out something very mysterious. We organized some directorys to be used by specific domain groups. If we put a user into a group the user is allowed to access the associated share. So far this works pretty nice.

Re: [Samba] Problem with LDAP groups and associated file permissions

2006-12-14 Thread Michael Coburn
Have you confirmed that those group memberships have been truly revoked in LDAP? Does OpenLDAP need to be reloaded/restarted? Is the client actually contacting LDAP after you logged them out to find out it's new group memberships? -- Michael Coburn Manuel Graumann wrote: Hi folks! Our smb

Re: [Samba] Problem with LDAP groups and associated file permissions

2006-12-14 Thread Cleber P. de Souza
Are you using some cache service such as nscd? If so, try disable it and after lower the cache time to one more accurate value for your environment. On 12/14/06, Manuel Graumann [EMAIL PROTECTED] wrote: Hi folks! Our smb with LDAP PDC now seems to be nearly completed. Just now we found out

Re: [Samba] Problem with LDAP groups and associated file permissions

2006-12-14 Thread Matt Skerritt
Check the file permissions on the folder and files in question. If the folder is setup with world execute permissions, anybody can change into it - and any files created by the user in question will probably be owned by them - and so they'll still have access if they can change into the

Re: [Samba] Problem with LDAP groups and associated file permissions

2006-12-14 Thread Murray Trainer
On Fri, 2006-12-15 at 12:15 +1100, Matt Skerritt wrote: Check the file permissions on the folder and files in question. If the folder is setup with world execute permissions, anybody can change into it - and any files created by the user in question will probably be owned by them - and