Re: [Samba] not working : valid users = @DOM+USER

2004-06-08 Thread Charles Bueche
Hi again, I tested again, and I found that winbind return Windows groups up to the OS limit (16 by default in Solaris 9). The group I wanted to check against was mapped as 22nd in the list, so the check failed. One solution would be to rise the limit to 32 on Solaris (using set ngroups_max = 32

[Samba] not working : valid users = @DOM+USER

2004-06-07 Thread Charles Bueche
Hi, I have Samba 3.0.4 on Solaris 9, recent patches applied. Samba is integrated in domain (security = domain). I have compiled and configured winbind, but not pam and no ldap. Ncsd is stopped. Winbind works OK, I can connect to share and users get mapped on-the-fly to UNIX uids and gids in the

Re: [Samba] not working : valid users = @DOM+USER

2004-06-07 Thread Spaceboy
Charles, I've just done this here on Solaris 8. I have found slightly odd behaviour in that wbinfo -u and wbinfo -g only return the actual usernames and groups rather than DOMAIN+Username and DOMAIN+Groupname. So in my smb.conf file I needed:- valid users = @Groupname without the DOMAIN+ part.

Re: [Samba] not working : valid users = @DOM+USER

2004-06-07 Thread Charles Bueche
Hi Steve, strange... so it just fallback to Win groups if it doesn't find local groups ? I ahve studied the source, mainly lib/username.c and friends. I have seen that it try to look up the name without the domain prefix, which fail (same effect as in wbinfo). I'm now away from this customer