Re: [Samba] ACLS without winbind (but WITH correct user mapping)

2012-07-04 Thread Colin Fowler
On 26/06/12 11:54, Colin Fowler wrote: On 26/06/12 06:48, Andrew Bartlett wrote: On Fri, 2012-06-22 at 16:11 +0100, Colin Fowler wrote: On 21/06/12 17:50, Jeremy Allison wrote: On Thu, Jun 21, 2012 at 05:50:45PM +0100, Colin Fowler wrote: Note the DOMAIN and not Unix User. Clicking apply

Re: [Samba] ACLS without winbind (but WITH correct user mapping)

2012-06-25 Thread Andrew Bartlett
On Fri, 2012-06-22 at 16:11 +0100, Colin Fowler wrote: On 21/06/12 17:50, Jeremy Allison wrote: On Thu, Jun 21, 2012 at 05:50:45PM +0100, Colin Fowler wrote: Note the DOMAIN and not Unix User. Clicking apply simply makes the new entry disappear. If username mapping is working correctly,

Re: [Samba] ACLS without winbind (but WITH correct user mapping)

2012-06-22 Thread Colin Fowler
On 21/06/12 17:50, Jeremy Allison wrote: On Thu, Jun 21, 2012 at 05:50:45PM +0100, Colin Fowler wrote: Note the DOMAIN and not Unix User. Clicking apply simply makes the new entry disappear. If username mapping is working correctly, why does adding an ACL for DOMAIN\nigel not set an ACL for

Re: [Samba] ACLS without winbind (but WITH correct user mapping)

2012-06-22 Thread steve
On 22/06/12 11:41, Colin Fowler wrote: On 21/06/12 17:50, Jeremy Allison wrote: On Thu, Jun 21, 2012 at 05:50:45PM +0100, Colin Fowler wrote: Am I corect in thinking that this is something that would be desireable for others and not just me and my rather oddball configuration? For people

Re: [Samba] ACLS without winbind (but WITH correct user mapping)

2012-06-22 Thread Colin Fowler
On 22/06/12 11:46, steve wrote: On 22/06/12 11:41, Colin Fowler wrote: On 21/06/12 17:50, Jeremy Allison wrote: On Thu, Jun 21, 2012 at 05:50:45PM +0100, Colin Fowler wrote: Am I corect in thinking that this is something that would be desireable for others and not just me and my rather

Re: [Samba] ACLS without winbind (but WITH correct user mapping)

2012-06-22 Thread steve
On 22/06/12 12:50, Colin Fowler wrote: On 22/06/12 11:46, steve wrote: On 22/06/12 11:41, Colin Fowler wrote: On 21/06/12 17:50, Jeremy Allison wrote: On Thu, Jun 21, 2012 at 05:50:45PM +0100, Colin Fowler wrote: Am I corect in thinking that this is something that would be desireable for

Re: [Samba] ACLS without winbind (but WITH correct user mapping)

2012-06-22 Thread Colin Fowler
On 22/06/12 12:22, steve wrote: On 22/06/12 12:50, Colin Fowler wrote: On 22/06/12 11:46, steve wrote: On 22/06/12 11:41, Colin Fowler wrote: On 21/06/12 17:50, Jeremy Allison wrote: On Thu, Jun 21, 2012 at 05:50:45PM +0100, Colin Fowler wrote: Am I corect in thinking that this is

Re: [Samba] ACLS without winbind (but WITH correct user mapping)

2012-06-22 Thread Colin Fowler
On 21/06/12 17:50, Jeremy Allison wrote: On Thu, Jun 21, 2012 at 05:50:45PM +0100, Colin Fowler wrote: Note the DOMAIN and not Unix User. Clicking apply simply makes the new entry disappear. If username mapping is working correctly, why does adding an ACL for DOMAIN\nigel not set an ACL for

[Samba] ACLS without winbind (but WITH correct user mapping)

2012-06-21 Thread Colin Fowler
Thanks to some of the guys on #samba-technical (obnox in particular!), I now have a working samba configuration. The environment: In our setup each user has an entry in both openldap (no samba schemes) and AD. Each account has the same name and even has a Unix UID entry in AD. Our users ssh

Re: [Samba] ACLS without winbind (but WITH correct user mapping)

2012-06-21 Thread Jeremy Allison
On Thu, Jun 21, 2012 at 05:50:45PM +0100, Colin Fowler wrote: Note the DOMAIN and not Unix User. Clicking apply simply makes the new entry disappear. If username mapping is working correctly, why does adding an ACL for DOMAIN\nigel not set an ACL for Unix User\nigel? I'm not sure username

Re: [Samba] ACLs and winbind

2007-08-10 Thread Thierry Lacoste
On Thursday 09 August 2007 15:58, Angela Gavazzi wrote: My working nsswitch.conf look like this: passwd: files winbind ldap group: files winbind ldap shadow: files winbind ldap By, Angela Can nss_winbind be used against a Samba domain? AFAICS it is only used to

Re: [Samba] ACLs and winbind

2007-08-09 Thread Henrik Zagerholm
8 aug 2007 kl. 16:18 skrev Thierry Lacoste: I'm trying to allow XP clients to add ACLs in the homes share. It appears that I'm unable to do it unless I use winbind although I'm in a pure Samba/OpenLDAP environment. I have a PDC and BDC with Samba/OpenLDAP and a member Samba server with homes

Re: [Samba] ACLs and winbind

2007-08-09 Thread Thierry Lacoste
On Thursday 09 August 2007 08:38, Henrik Zagerholm wrote: 8 aug 2007 kl. 16:18 skrev Thierry Lacoste: I'm trying to allow XP clients to add ACLs in the homes share. It appears that I'm unable to do it unless I use winbind although I'm in a pure Samba/OpenLDAP environment. I have a PDC

Re: [Samba] ACLs and winbind

2007-08-09 Thread Angela Gavazzi
On Thursday 09 August 2007 13:28:49 Thierry Lacoste wrote: Thanks Henrik. Can someone explain why or point me to some doc? What I read everywhere is that winbind is used to identify users of a windows domain at the NSS level (mapping them localy with winbindd_idmap.tdb or globaly with ldap)

[Samba] ACLs and winbind

2007-08-08 Thread Thierry Lacoste
I'm trying to allow XP clients to add ACLs in the homes share. It appears that I'm unable to do it unless I use winbind although I'm in a pure Samba/OpenLDAP environment. I have a PDC and BDC with Samba/OpenLDAP and a member Samba server with homes and profiles (below is its smb.conf) on which I