Hi Mark, that did not resolve the problem for me. Removing the @ sign produced the same error message (see below)...
Greetings Andreas -----Urspr�ngliche Nachricht----- Von: Mark Le Noury [mailto:[EMAIL PROTECTED] Gesendet: Donnerstag, 14. Oktober 2004 12:43 An: [EMAIL PROTECTED] Betreff: RE: [Samba] Samba 3.0.7 / AD Domain Group Resolving Hi, I think that you are fomatting the valid users directive incorrectly. Try valid users = DOMAIN+Group_name (I use + as my winbind separator, substitute for whatever you have chosen) No @ sign necessary It works fine for me like that. Thanks, Mark -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 14 October 2004 12:38 PM To: [EMAIL PROTECTED] Subject: [Samba] Samba 3.0.7 / AD Domain Group Resolving Hello List, currently we have Samba 3.0.7 running on SLES8 systems with AD integration. We�re using the SerNet RPM�s (ftp.sernet.de) Everything works fine so far, we just have a problem with resolving domain groups. wbinfo -g works fine, the domain groups are correctly resolved. But when inserting a "valid users = @AD_DOMAIN_GROUP" statement in the smb.conf we get the following error: smbd/service.c:make_connection_snum(314) user 'DOMAIN\User.Name' (from session setup) not permitted to access this share (sharename) Inserting the user with his normal accountname does work (e.g. valid users = DOMAIN\User.Name) We do have a lot of AD Groups, some users are member of more than 200 groups (and no, we cannot fix that, reducing the number of groups is unfortunately not an option). I did find several post in the list archives on this topic, but no practical solution yet. Is there a solution? Are more details necessary? One more thing: we also have the problem that once in a while winbind dies when executing wbinfo -g or -u. I don�t know, if this is somehow connected. Anyone any ideas? I�m a bit lost here... Greetings Andreas Grzeski Systems Engineer/RHCE Stadtwerke M�nchen GmbH -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
