[Pkg-samba-maint] Bug#912193: Bug#912193: samba: Ignores UNIX groups

[Paul Szabo]

Dear Mathieu,

>>> Why your UNIX groups don't match your Windows groups? This is usually
>>> the case, with nss_winbind.
>>
>> My site is mainly Linux; we have secondary groups in the /etc/group
>> file. ...
>>
>>> Alternatively, you can reverse the logic with idmap_nss.
>>
>> I tried that, did not seem to help.
> 
> And have you tried "winbind use default domain = yes"?

Yes I did, and it did not help: even with that setting, "strace" shows
that samba does
   setresuid(1001, 1001, -1)
with the UNIX UID/GID, but then also does
   setgroups(7, [3000031, 100, 3000009, 3000013, 3000014, 3000003, 3000018])
with the "Windows group" GIDs. (The above was when a Windows10 PC did a
"map network drive" connecting to a share.)

> Can you post your (redacted) smb.conf?

Below, as was during the test with "winbind use default domain = yes",
in its entirety.

Cheers, Paul
-- 
Paul Szabo   psz at maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of Sydney    Australia
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: smb.conf
URL: <http://alioth-lists.debian.net/pipermail/pkg-samba-maint/attachments/20181030/3f995226/attachment-0001.ksh>