SAMBA access based on NT Domain groups [using winbind]
This may be a stupid question. I've searched the web for an answer and I'm not getting too far.
I've installed winbind + samba on our mandrake 8.2 server. Domain authentication is working fine. Users are granted access to shares based on domain user permissions (write-list: DOMAIN+User), etc (syntax aside).
I would like to know if group permissions are possible. For example: write-list: DOMAIN+Group. I've tried different things and I can't get anything to work right. I've even tried @DOMAIN+Group, and I can't get it to work (I'm using SWAT to edit smb.conf).
I also have the question, that if this is possible, do I need to escape spaces in group names. This comes to play when I use built-in groups to control access (such as domain users, domain admins, etc.).
Any help would be appreciated.