Re: [Samba] problems with share permissions
- Date: Tue, 12 Dec 2017 22:09:16 +0000
- From: Rowland Penny via samba <samba@xxxxxxxxxxxxxxx>
- Subject: Re: [Samba] problems with share permissions
On Tue, 12 Dec 2017 14:01:03 -0800
Jerry Lowry <jlowry@xxxxxxx> wrote:
> Sorry didn't scroll up far enough :)
> samba version : 4.4.4-14.el7_3
> also forgot that pictures don't transfer....it has been a tough week,
> this is Friday right?
> Here is the global section:
> workgroup = Accounting
> security = ADS
> realm = Accounting.edt.local
> log file = /var/log/samba/%m.log
> log level = 1
> # Default ID mapping configuration for local BUILTIN accounts
> # and groups on a domain member. The default (*) domain:
> # - must not overlap with any domain ID mapping configuration!
> # - must use a read-write-enabled back end, such as tdb.
> # - Adding just this is not enough
> # - You must set a DOMAIN backend configuration, see below
> idmap config * : backend = ad
> idmap config * : range = 1000000-2000000
This is wrong, you cannot use the 'ad' backend for the default domain,
it should be 'tdb'.
You should also have 'idmap config' lines for the 'ACCOUNTING' domain,
can I suggest you go and read this wikipage again:
Just a thought, have you given your users a unique number inside the
'1000000-2000000' range and Domain Users a gidNumber inside the same
range, these attributes are not added automatically.
To unsubscribe from this list go to the following URL and read the