I am having an issue and I am hoping that it is not just a limitation of Linux. I really want to get rid of some Windows fileservers.

I have Fedora Core 1 and Samba 3.0.2 configured with ADS security and all appears to be working well. I can do a "wbinfo" and "net group" and get the desired results. I can also map a drive using ADS security. However, the problem is the Linix will only recognize that a Windows AD user is only a member of one group and the Samba SWAT status screen seems to reflect this. It appears that Samba will only recognize that users primary group and none of the others that he/she belongs. This extremly reduces my security options in file and directory permissions.

Is there a way to get Samba 3.0.2 to recognize all the groups in AD that a user belongs? Also, is it true that Linux can only have three permissions on a directory or file? (1 user, 1 group, and others)

Any help would be appreciated,
Sam

Hi Sam

Im not a master on this issues but, aren't you mixing domain groups with Linux/unix groups? or am I?

As far as I know (which isn't much) you can have network groups and or belong to a Domain using Samba as a Primary Domain Controller (recomended), and the groups you see on the SWAT or Webmin are the Linux/Unix groups, there is where you actually set users and their permissions.
BTW. use Webmin, it has a Samba module which works very well, and you can see the primary linux group and the secondaries aswell.

And yes you can have three types of permissions users, groups and others (uuugggooo) each one of these with read,write and execute.

In my personal experience I have a network with 18 people connected, I use samba as a PDC to control access to a domain, and also as a file server to give access to each ones files and some comon files.

I created various user groups on the unix server with users and different levels of access on each group. I Then synchronized the groups with the Samba Groups via Webmin, don't remember how to do it manually

Hope any of this helps

Unfortunately I work for a medium sized company and need the functionality of multiple groups. I am still trying to figure out a way around the one user/group/others limitation that Linux uses. I need to assign many different levels of security to the same location.

I did find some information that version 3.0.2 has several bugs, one of them being the multiple group usage. It is supposed to be fixed in the next release. The workaround is to set "Use default Domain" to "no". That is supposed to make the multiple groups work, but I have not tried it yet.

Thanks for the info,
Sam

My problem was resolved when I installed version 3.0.3pre2.