[Pkg-samba-maint] Bug#368251: winbind NSS, omitted groups

[Christian Perrier]

Quoting Jim Barber (jim.barber at ddihealth.com):
> Hi.
> 
> I just noticed this bug report when looking through to solve another 
> problem of mine.
> I too encountered this problem in the past but it was fairly easy to fix.
> You need to make sure you have the following settings in your 
> /etc/samba/smb.conf file:
> 
> 	winbind enum groups = yes
> 	winbind enum users = yes
> 
> These used to be the default values in Samba 3.0.14 that I was previously 
> using, but the defaults had changed when I moved to Samba 3.0.24.
> Once you add these clauses (and I think restart samba and winbind) then the 
> 'groups' command will start returning the secondary groups again.


As a winbind user, I think that these should be interesting defaults
to add to the default smb.conf, yes.

We can't do anything for existing configurations. Adding options to an
existing smb.conf (during an upgrade) is really too dangerous, imho
and fixing this should be left to the local admin (after all,
installing a samba server *requires* some skills with samba).

So, I propose that, as a side consequence of this bug report, we add
both options to th edefgault smb.conf, commented (just like all other
default winbind options we provide).


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20070301/5d350762/attachment.pgp