Hi,

I configured Samba 3 + Windows AD access in ubuntu 8.0.4 and i got it working, at least i do a "wbinfo -u" or "-g" and i can see AD Groups and Users correctly.

The problem is that i guess these existing groups and users didn't figure yet inside /etc/passwd and /etc/group because when using the "getent" command only the native linux users and groups are displayed.

Due this i cannot setup samba shares with Domain permissions correctly.

Anyone know if i miss some step or what you i do to "pump" AD users and groups to be available in my machine and then use it to set the apropriate permissions in my files and folders?

Thank you very much,
Best regards,
Teixeira

I believe you can set groups for each share in the smb.conf. Here is something from the man pages.

force group (S)
This specifies a UNIX group name that will be assigned as the default primary group for all users connecting to this
service. This is useful for sharing files by ensuring that all access to files on service will use the named group for
their permissions checking. Thus, by assigning permissions for this group to the files and directories within this ser-
vice the Samba administrator can restrict or allow sharing of these files.

In Samba 2.0.5 and above this parameter has extended functionality in the following way. If the group name listed here
has a ’+’ character prepended to it then the current user accessing the share only has the primary group default
assigned to this group if they are already assigned as a member of that group. This allows an administrator to decide
that only users who are already in a particular group will create files with group ownership set to that group. This
gives a finer granularity of ownership assignment. For example, the setting force group = +sys means that only users
who are already in group sys will have their default primary group assigned to sys when accessing this Samba share. All
other users will retain their ordinary primary group.

If the force user parameter is also set the group specified in force group will override the primary group set in force
user.

Default: force group =

Example: force group = agroup