Re: [Samba] create_local_nt_token_from_info3 not pulling supplementary UNIX groups

2013-10-04 Thread Volker Lendecke
On Thu, Oct 03, 2013 at 10:37:07AM -0400, Brian H. Nelson wrote: Can anyone with knowledge about this issue offer any comment? Somebody has to have an idea about it, good or bad. The general idea is that we 100% rely on what the Domain Controller tells us. username map is an explicit override

Re: [Samba] create_local_nt_token_from_info3 not pulling supplementary UNIX groups

2013-10-03 Thread Brian H. Nelson
Can anyone with knowledge about this issue offer any comment? Somebody has to have an idea about it, good or bad. Thanks, Brian On 9/11/2013 2:20 PM, Brian H. Nelson wrote: I'm trying to solve this issue I'm having where using 'valid users = +unixgroup' just plain doesn't work. I can't find

Re: [Samba] create_local_nt_token_from_info3 not pulling supplementary UNIX groups

2013-09-12 Thread Brian H. Nelson
According to the smb.conf man page, using @group is equavelnt to +group where '' means check it as an NIS netgroup and '+' means check it as a local UNIX group. Just +group should be what I want (I'm not using NIS) but I admit I haven't tested much with @group. Another interesting facet is

[Samba] create_local_nt_token_from_info3 not pulling supplementary UNIX groups

2013-09-11 Thread Brian H. Nelson
I'm trying to solve this issue I'm having where using 'valid users = +unixgroup' just plain doesn't work. I can't find any /documented/ reason why this is so, but nevertheless, it seems to be the case. This is with samba 3.6.18, but seems to exist in all of 3.6.x and most or all of 3.5.x and