Using Windows AD groups

badger_fruit · 04-21-2010, 08:10 AM

Hello all.
Firstly, apologies for the vague topic/subject!
The scenario is I have a Windows Server 2003 Domain Controller which runs ADUC. I have created some security groups which I would like to apply to my network shares. The problem is, the majority of my network shares are based on Open Suse machines which, although are part of the domain, when trying to configure the shares using SMB, do not allow me to select the Active Directory groups.

Please does anyone have a solution which will allow me to use ADUC security groups?

jschiwal · 04-22-2010, 01:04 AM

You probably want to post one of your smb.conf files. Also, do the SuSE machines use AD for authentication (e.g. to log in)? I would recommend getting the latest Using Samba book. You should be able to use a windows tool to manage the shares, much as you would to manage windows shares. The book recommends which program works best for this.

badger_fruit · 04-22-2010, 05:10 AM

Quote:

Originally Posted by jschiwal

You probably want to post one of your smb.conf files. Also, do the SuSE machines use AD for authentication (e.g. to log in)? I would recommend getting the latest Using Samba book. You should be able to use a windows tool to manage the shares, much as you would to manage windows shares. The book recommends which program works best for this.

Right, sorry, I didn't know what information to post!

I'm away from my PC now so I will post the SMB.CONF to the forum later on.

In the meantime, yes, the server authenticates against the Domain Controller. I use Windows Active Directory Users and Computers to manage the groups and have the 2003 Admin kit installed on a Windows XP machine for remote-administration.

I'll re-post later with an example SMB.CONF, thanks!

badger_fruit · 04-27-2010, 03:10 AM

Hi
Sorry it's taken longer than expected ...

Code:

[global]
        printing = cups
        printcap name = cups
        cups options = raw
        map to guest = Bad User
        include = /etc/samba/dhcp.conf
        usershare allow guests = No
        netbios name = SERVER_A
        workgroup = MY_DOMAIN
        server string = "File Server 1"
        name resolve order = bcast host lmhosts wins
        idmap gid = 10000-20000
        idmap uid = 10000-20000
        security = ADS
        realm = MYDOMAIN.COM
        template homedir = /home/%D/%U
        template shell = /bin/bash
        winbind refresh tickets = yes

[to-sort]
        comment = Items to sort
        path = /share/data/to-sort
        guest ok = yes
        read only = no

Any help would be appreciated!