Bug 2351 - Updated 3.04 to 3.11 and workstation permissions using primary group do not work
Summary: Updated 3.04 to 3.11 and workstation permissions using primary group do not work
Status: RESOLVED FIXED
Alias: None
Product: Samba 3.0
Classification: Unclassified
Component: User/Group Accounts (show other bugs)
Version: 3.0.11
Hardware: All Linux
: P3 normal
Target Milestone: none
Assignee: Samba Bugzilla Account
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-02-16 08:11 UTC by freedom
Modified: 2006-04-08 11:37 UTC (History)
0 users

See Also:


Attachments
Samba config File (2.89 KB, text/plain)
2005-02-16 08:13 UTC, freedom
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description freedom 2005-02-16 08:11:15 UTC
I moved a working 3.04 Samba system to a Fedora Core 3 based system with 3.11
installed.  All was working well.

System environment is the PDC with windows XP with SP2 clients

Unix users/Groups is acquired via NIS

samba authentication is through smbpasswd

Net Groupmaps are setup as follows

System Operators (S-1-5-32-549) -> -1
Replicators (S-1-5-32-552) -> -1
Guests (S-1-5-32-546) -> -1
Domain Admins (S-1-5-21-892218768-3045639999-384985677-512) -> systems
Power Users (S-1-5-32-547) -> -1
Print Operators (S-1-5-32-550) -> operations
Administrators (S-1-5-32-544) -> -1
Print Operators (S-1-5-21-892218768-3045639999-384985677-550) -> CCC
Domain Users (S-1-5-21-892218768-3045639999-384985677-513) -> CCC
Account Operators (S-1-5-32-548) -> -1
Domain Guests (S-1-5-21-892218768-3045639999-384985677-514) -> nobody
Backup Operators (S-1-5-32-551) -> operations
Users (S-1-5-32-545) -> CCC

On a workstation logged onto the domain pick any directory assign permissions to
Domain Users.  Pick a user in the CCC group the effective permissions will not
display.  (Building a new group and assigning CCC to it exibits the same behaviour)

Change the group mapped to Domain users to a regular group (NOT primary)
and effective permissions are assigned properly



getent group | grep CCC
CCC::19:root,operator,wintest,cccftp,freedom,hipaa

id tammy (A member of CCC) 
uid=142(tammy) gid=19(CCC)
groups=19(CCC),4163(CCCusers),204(clientserv),213(empadmin),201(Program)
Comment 1 freedom 2005-02-16 08:13:57 UTC
Created attachment 967 [details]
Samba config File

Samba Config File attached
Comment 2 Gerald (Jerry) Carter (dead mail address) 2006-04-08 11:37:15 UTC
please retest against a current version.  Thanks.