Web lists-archives.com

Re: [Samba] Problem sysvolreset




On Tue, 7 Mar 2017 13:16:23 -0300
Edson Tadeu Almeida da Silveira <edson.tadeu@xxxxxxxxx> wrote:

> Hi Rowland.
> 
> But, samba automaticaly do this mapping.
> 
> root@server:/usr/local/src/samba-4.4.10# id 'domain admins'
> uid=3000008(DOMAIN\domain admins) gid=3000008(DOMAIN\domain admins)
> groups=3000008(DOMAIN\domain admins)
> 
> 
> Because of this options in smb.conf:
> 
> winbind enum users = yes
> winbind enum groups = yes
> 
> Can i remove this mapping only for domain admin group?

No and those options aren't doing the mapping. All they do is make
'getent passwd' & 'getent group' show all users and groups, without
them, you will have to do 'getent passwd username' or 'getent group
groupname'. You do not need them for Samba to work.

The problem with the GPOs that you are adding is that Samba seems to
think they should be set differently to what windows sets them to.

Big hint here, don't use sysvolreset if you add any GPOs

Rowland 

  

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba