Bug 7660 - valid users options
Summary: valid users options
Alias: None
Product: Samba 3.2
Classification: Unclassified
Component: User & Group Accounts (show other bugs)
Version: 3.2.8
Hardware: Sparc Solaris
: P3 normal
Target Milestone: ---
Assignee: Samba Bugzilla Account
QA Contact: Samba QA Contact
Depends on:
Reported: 2010-09-03 08:24 UTC by Pierre DUPEYRAT
Modified: 2022-08-21 20:24 UTC (History)
0 users

See Also:


Note You need to log in before you can comment on or make changes to this bug.
Description Pierre DUPEYRAT 2010-09-03 08:24:17 UTC
I am using samba server as members of windows AD domain , with “security = ADS”, the logins unix and windows are aligned.
Servers are in Solaris 8 & 10
Since the version 3.0.34, 3.2.8 ,3.4.6 , I have strange behaviour  on shares where i use “valid users” with NIS unix groups it does’nt work, it was working fine in 3.0.30.

Valid users = @group1
Valid users = +group1  

Still work :
Valid users = Domain\user 
Valid users = user

The bad workaround found , is to use a file users.map and add the entry below:
user = domaine\user
The samba behavior is like if samba was unable to identify the unix groups of a user without an entry in the users.map file.

could you help me ?
Comment 1 Pierre DUPEYRAT 2010-09-06 09:41:13 UTC
# /etc/nsswitch.nis:
passwd:    files nis
group:     files nis
Comment 2 Pierre DUPEYRAT 2010-09-06 11:42:18 UTC
When i kill winbind process , it works fine :-((
Comment 3 Pierre DUPEYRAT 2010-09-07 02:18:13 UTC
I should'nt use winbind to access but i can see logs below :

Failed to create BUILTIN\Users group! Can Winbind allocate gids?
Comment 4 Rowland Penny 2022-08-21 20:24:22 UTC
Closing this, it has been 12 years since any movement and, in the mean time, nis has been removed from Samba. There is now nothing to fix.