Gerald (Jerry) Carter wrote:
I have a Samba file server which I have successfully joined to a domian
controlled by a Windows 2003 domian controller. I cannot get the server to
allow access to users who are members of a group with spaces in its name.
I have the same problem with Samba version 3.20b. What is interesting is
that groups with spaces in the name work through Winbind (ie. apache
with mod_auth_pam), but don't work from within Samba (ie. the smb.conf
file). Is this currently being resolved, and/or is there a work around?
....
valid users = "@spaced users"
Should be valid users = +"DOMAIN\spaced users"
The key is that domain users and groups have to be fully qualified.
I've tested with every variation of syntax ie. &, + and @, DOMAIN\,
domain\, Domain\, etc. Things work consistently when I change the the
group name to "group_name" or "DOMAIN\group_name". But, when I use
either with a space in the name I get authentication errors (smbd only).
The log files list the correct fully qualified domain group name and
the user name, but then say that the member does not belong to that group.
The reason I've posted here is that winbindd (using PAM and Apache)
seems to be fine with the spaces in the name.
I'm using
realm = fqdn.domainname.com
workgroup = DOMAINNAME
winbind use default domain = yes
If you need more detailed logs, please let me know. BTW this is with a
Windows 2003 Active Directory domain controller.
Cheers,
Jeremy
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
