Re: [Samba] Problem with Universal Groups

2006-03-06 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Don Meyer wrote: If instead the response was: yes, this inconsistency is a problem (bug) -- the causes however, are particularly insidious, and will take some major reworking and the fixing of contributory problems before we can properly address

Re: [Samba] Problem with Universal Groups

2006-03-04 Thread Don Meyer
At 09:26 PM 3/3/2006, Gerald (Jerry) Carter wrote: Don Meyer wrote: As far as trying to at least get Domain Local group handling fixed in winbind, I would suggest looking at Bug 3530 on bugzilla.samba.org. The more people that can show similar failure cases, the more likely we can convince

RE: [Samba] Problem with Universal Groups

2006-03-03 Thread Trimble, Ronald D
. Domain Local doesn't work at all unless the user is in the same domain as the group. How do we get this escalated? -Original Message- From: Don Meyer [mailto:[EMAIL PROTECTED] Sent: Thursday, March 02, 2006 6:06 PM To: Trimble, Ronald D; samba@lists.samba.org Subject: Re: [Samba] Problem

RE: [Samba] Problem with Universal Groups

2006-03-03 Thread Don Meyer
unless the user is in the same domain as the group. How do we get this escalated? -Original Message- From: Don Meyer [mailto:[EMAIL PROTECTED] Sent: Thursday, March 02, 2006 6:06 PM To: Trimble, Ronald D; samba@lists.samba.org Subject: Re: [Samba] Problem with Universal Groups Check your

Re: [Samba] Problem with Universal Groups

2006-03-03 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Don Meyer wrote: I can't speak for Domain Universal/Global groups -- our read of the MS documentation indicated that other-domain users were not valid within Universal/Global groups, but were in a Domain Local Group. As far as trying to at least

Re: [Samba] Problem with Universal Groups

2006-03-02 Thread Don Meyer
Check your winbind group memberships -- I'm willing to bet that your winbind will only show group membership for users in the same domain as the group. We are seeing the same mis-behavior here. Group members from other domains are simply not being enumerated by winbind as a group member