Samba + Winbind + Domain Users group
Hello All,
I am running RH8 with Samba installed along with Winbind. General authentication features are working perfectly but I have two issues with Samba.
Winbind appears to be working OK - wbinfo gives expected results and I have managed to set up shares with Domain account owners and groups.
1. The first problem is that the Domain Users group does not resolve to a name. For example, I can have a file on the Linux box with a uid of {Domain}\{Username} and a gid of {Domain}\{Group} and when I do an ls I get a listing as below:
[root@wuldor winnt]# ls
total 12
drwxrwxr-x 3 DOM\admin DOM\Domain Admins 4096 Dec 1 10:28 ./
drwxr-xr-x 5 root root 4096 Dec 1 10:28 ../
drwxrwxrwx 5 DOM\admin DOM\Domain Admins 4096 Dec 2 16:27 data/
So far, so good. But if the uid is a normal Domain user and belongs to the Domain Users group I get a numeric representation of the Domain Users group, eg.
[root@wuldor data]# ls
total 12
drwxrwxrwx 5 DOM\admin DOM\Domain Admins 4096 Dec 2 16:27 ./
drwxrwxr-x 3 DOM\admin DOM\Domain Admins 4096 Dec 1 10:28../
drwxr-xr-x 2 DOM\user 10003 4096 Jan 15 11:05 udir/
This appears to be the only group which exhibits this behaviour.
2. The second problem lies with managing the shares once they are created. As the Samba server will be incorporated into an existing NT Domain infrastructure, the permissions on the shares must be editable using Windows apps (ie. Server Manager or Explorer)
I can view file permissions from Explorer and when viewed they show permissions as being 'Everyone - Full Control'
When I try to change these, (using a Domain Admin account) Windows reports that it is changing the permissions but when I return to the share, nothing has changed and the permissions have reverted back to 'Everyone - Full Control'
Please help!!
Thanks.
|