User eftmanager is in the AD group NMCS\uploadwip, which maps to gid 15007 on Samba, but when connecting on SuSE, can't access files. id says: id=6010(eftmanager) gid=3011(eftwrite) groups=3011(eftwrite),3004(fileadmin),3007(idgwrite), 3008(idgread) As the group isn't getting passed through ,at least as far as "id" is concerned, the inability to open the files seems to be a case of missing groups. /etc/release says the machine is SUSE Linux Enterprise Server 10 (x86_64) SGI InfiniteStorage Software Platform, version 1.6, Build sgi160r2-1.6, Wed Apr 1 19:00:40 UTC 2009 RPM says: rpm -q -f /usr/sbin/smbd sgi-samba-3.2.0-24.1sgi160r2 The primary rapporteur is Ron Short, short@sgi.com
A proposed workaround/confirmation: manually add the applicable groups to eftmanager's list in /etc/groups
To me this sounds like a configuration problem. Please upload your smb.conf. Are you running winbind? How do you map groups from AD to Unix? Volker
Correcting component and version number.
I know the smb.conf, we'll need to ask Ron the other questions... I find I can't add him as a CC, he's Ron Short <short@sgi.com>. Can you??? sdathengmds01:~ # more /etc/samba/smb.conf # Global parameters [global] workgroup = NMCS realm = NMCS.SDMENGINEERING.COM netbios name = ENGSMB name resolve order = lmhosts host wins bcast interfaces = 162.49.57.25/0xffffff00 bind interfaces only = Yes security = ADS auth methods = winbind password server = dmcontroller2.nmcs.sdmengineering.com, dmcontroller3.n mcs.sdmengineering.com #passwd program = /usr/bin/passwd %u #passwd chat = *ew*password:* %n\n *e-enter*new*password:* %n\n max log size = 500 max xmit = 65535 os level = 0 preferred master = No local master = No domain master = No ldap ssl = no idmap uid = 15000-20000 idmap gid = 15000-20000 comment = %h (Samba %v) hosts allow = 162.49.57. hide dot files = No locking = No share modes = No [library] path = /media/library read only = No directory mask = 0775 #force group = +dmfwrite [cam] path = /media2/cam read only = No directory mask = 0775 #force group = +dmfwrite
Probably he needs an account in bugzilla. But we can probably do it via you. Volker
Any more info here?
No feedback, closing. Volker