Re: [samba] users in multiple groups?

2004-11-02 Thread Daniel Wilson
Ok i have removed all of my groups from LDAP, downloaded smbldap-tools-0.8.5 used smbldap-populate to create my groups again. however when i add a user to a group the users still seem not to be registered in the group. This is how i created and added a user to a group. quigon1:~

[samba] users in multiple groups?

2004-11-01 Thread Daniel Wilson
Hi, I have setup samba 3.0.7 with LDAP and NetApps Filers as our file store. We are going to lots of departmental shares, firstly we want only people from their own dept to have access to their department share, but users from other departments may need access to other dept shares, i would like

Re: [samba] users in multiple groups?

2004-11-01 Thread Paul Gienger
every user is added to the group, but i cant seem to find a way for a user to be part of multiple groups, sambaPrimaryGroupSID isnt multi-valued, neither is gidNumber. Is there any way around this, has anybody have sugesstions? Bone up on your UNIX group membership theory. Every user has a

Re: [samba] users in multiple groups?

2004-11-01 Thread Daniel Wilson
Firstly thanks for your response. I have already done what you have suggested, however its not working. my account in LDAP (ws0dwi) has a gidNumber of (901) and the sambaPrimaryGroupSID = the SID of the group in LDAP called (itacs). I also want to be a member of domain admins, so i add

Re: [samba] users in multiple groups?

2004-11-01 Thread Paul Gienger
(itacs). I also want to be a member of domain admins, so i add another memberUid = ws0dwi in the domain admin group in LDAP, my if you do getent groups does your domain admin group show up? Of course you could always restart nscd if you haven't, just to make sure you're not geting into a

Re: [samba] users in multiple groups?

2004-11-01 Thread Paul Gienger
quigon1:~ # getent groups Unknown database: groups Oh yeah, duh... you know, I thought I made a mistake once, but then when I reexamined the situation, it turned out that I didn't... NYWAY the populate script made this for me: [fgoserv:tmp]# getent group Domain Admins Domain