Hi all,
I'm not able to create localgroups as described 
in "docs/man/Samba-HOWTO-Collection/groupmapping.html"

I have tested Samba 3.2.5 and 3.2.6 on Debian lenny.
As usual I am using openldap as backend.


First I have tested with smbldap-tools, then I have switched to 
        ldapsam:editposix = yes
        ldapsam:trusted = yes
and removed all the script entries from smb.conf.

The result is always the same:

Localgroups are created with:
        objectClass: sambaSidEntry
        objectClass: sambaGroupMapping
        sambaGroupType: 4

Globalgroups are created with:

        objectClass: posixGroup
        objectClass: sambaGroupMapping
        sambaGroupType: 2

The very ugly result is, that getent is not able to resolve any local 
group, as stated in groupmapping.html.


A solution may be, that the code that create the localgroups, share the 
code which create global groups ???

Any Ideas?



PS

Even if I manually create a localgroup with the objectclasses from 
rfc2307, like so:

objectClass: top
objectClass: sambaSidEntry
objectClass: posixGroup
objectClass: sambaGroupMapping
objectClass: extensibleObject
cn: ab38
gidNumber: 6005
sambaSID: S-1-5-21-2462391502-1360153102-2655098952-5080
sambaGroupType: 4
displayName: ab38
memberUid: domadmins
sambaSIDList: S-1-5-21-2462391502-1360153102-2655098952-512

is the reult the same. 
  net rpc group members
will list all members of nested groups, getent will not :-(

if I switch sambaGroupType to 2, both will work 

-- 

Gruss
        Harry Jede
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to