[Samba] Samba groups and LDAP, and printer question

2004-11-02 Thread Misty Stanley-Jones
Hi, Is it possible for me to add @Some_Group as a memberUID for a Samba group mapping? Will it expand that @Some_Group to include all the members of that group in this group? Another question -- is there a way to make everyone able to add printers to their local workstation, but not be able

Re: [Samba] Groups and LDAP

2003-11-21 Thread Beast
Friday, November 21, 2003, 5:44:54 AM, Robert wrote: I think I understand. So, if I want a user (in LDAP) to be a part of your ntadmins group, I'd set his gidNumber to 1000, correct? Would I also need to add a memberUid field in the ntadmins group for this user? IE for user bob: dn:

Re: [Samba] Groups and LDAP

2003-11-21 Thread Patrick
Robert Rati wrote: I think I understand. So, if I want a user (in LDAP) to be a part of your ntadmins group, I'd set his gidNumber to 1000, correct? Would I also need to add a memberUid field in the ntadmins group for this user? IE for user bob: You could set the users gidNumber to 1000,

[Samba] Groups and LDAP

2003-11-20 Thread Robert Rati
I'm a little weak on how the groups assignments work with Samba and LDAP. The Samba HOWTO collection says to map each Domain Group to a UNIX system group, but if all authentication is done via LDAP (Unix and Windows) then do the groups still have to exist on the Samba Unix machine? Where do

Re: [Samba] Groups and LDAP

2003-11-20 Thread Patrick
Rob, Maybe I can shed some light on this for you. I have just setup a Samba PDC + LDAP machine here. For the group assignments to work you will still need to have a unix group on the machine. So you use the normal method to add a unix group in the ldap directory. You can then add any

Re: [Samba] Groups and LDAP

2003-11-20 Thread Robert Rati
I think I understand. So, if I want a user (in LDAP) to be a part of your ntadmins group, I'd set his gidNumber to 1000, correct? Would I also need to add a memberUid field in the ntadmins group for this user? IE for user bob: dn: cn=ntadmins,ou=Groups,dc=firerun,dc=net cn: ntadmins