[Pkg-samba-maint] Bug#462045: Bug#462045: samba: automagically add initial set of domain groups

[Christian Perrier]

tags 462045 wontfix
thanks


Quoting Anand Kumria (wildfire at progsoc.org):

Sorry for coming back on that bug so late. It didn't receive much
attention when reported, I'm afraid.

> Currently the default Samba install assumes you wish to either be a PDC
> or a standalone server (things could be setup so it asks you if Samba
> shluld be a BDC or Domain member, but there are not).
> 
> In either case the following Windows groups need to exist:
> 
> 	- Domain Admins
> 	- Domain Users
> 	- Domain Guests
> 
> Each of these groups has a well-known Unix group equivalent, (ntadmins,
> users and nogroup) respectively.
> 
> It would be good if:
> 
> 	- these Unix groups (ntadmins, users and nogroup) were added if
> 	  they went not present.

Well, that's contradictory. In one sentence, you mention these groups
to be "well-known groups"....but, later, you suggest adding them if
they don't exist.

It is my understanding that "well-known groups" are groups that have a
significant-enough prevalence to be added in base-passwd.... If these
ones aren't, they're not well-known enough


> 
> 	- these mappings were automatically added into Samba
> 	(net groupmap add ntgroup="Domains Admins" unixgroup="ntadmins"
> rid=512 type=d, etc.)


More generally speaking, I think that such tweaking belongs to the
local administrator and providing this for all users of the samba
package would certainly have weird side effects.

Therefore, I don't think we should implement this. Other maintainers,
please untag this bug if you disagree.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20090113/b55da23d/attachment.pgp