Samba: map domain group to local one

Posted by user285467 on Ask Ubuntu See other posts from Ask Ubuntu or by user285467
Published on 2014-05-26T14:35:30Z Indexed on 2014/05/27 9:56 UTC
Read the original article Hit count: 179

Filed under:

samba

I have a problem with mapping pure domain group to one existing on UNIX system. When I map NT domain account by default samba picks local SID - one that can be acquired via the command;

net getlocalsid

Instead of SID that comes from domain;

net getdomainsid

This is the behavior that I do not understand. I can explicitly set the SID to the domain one. E.g.:

net groupmap add sid=[DOMAIN SID]-[RID] ntgroup=[DOMAIN group] unixgroup=[UNIX group] type=l

However the command getent group | grep 'DOMAIN group indicates this group to be domain one - GID created in accordance to RID backend in use, not the GID of 'UNIX group' as expected. Worth to mention I use the winbind.

Strange thing is that I already have such mapping in place for other 'DOMAIN group2' that getent group reports with GID of local UNIX group with all members of the 'DOMAIN group2'. Now the question is how to populate such behavior for other of my groups???

Related posts about samba

Unable to connect to Samba printer

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I have a headless Ubuntu 12.04 server for files and printers. It shares files via Samba just fine. However, the HP PSC-750xi connected to the server via USB is not accessible from my Ubuntu 12.04 laptop. I can browse for it in the Printing control panel, but any attempt to authenticate my ID to the… >>> More
Samba folder is gone

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I seem to have some issues sharing folders from my Ubuntu 12.04 machine to a Win7 machine. After playing around with the settings, I decided to revert to Samba's original setting by reinstalling it: sudo apt-get purge samba sudo rm -rf /etc/samba/ /etc/default/samba sudo apt-get install samba just… >>> More
Samba on OS X 10.6.4

as seen on Server Fault - Search for 'Server Fault'
I just updated from 10.6.3 to 10.6.4, and now my Samba shares won't mount and won't allow access into the directories. In the logs, I've started to get the following errors, any idea what might have gone wrong? 2010/06/25 15:54:27, 0, pid=13848] /SourceCache/samba/samba-235.4/samba/source/passdb/secrets… >>> More
OpenLDAP and Samba, can't log onto Samba share from Windows

as seen on Server Fault - Search for 'Server Fault'
The former jackass IT-guy that I'm taking over for had a Samba share setup on a Fedora server that uses our OpenLDAP server to authenticate users who want to log in from Windows. We recently added a new employee and I jumped through the LDAP hoops to add them to the system. However, I can't seem… >>> More
Windows 7 Samba issue

as seen on Server Fault - Search for 'Server Fault'
We have a strange samba issue affecting only one user. Our samba setup is as follow : Red Hat Enterprise Linux Server release 5.4 (Tikanga) - Samba Server Samba version 3.0.33-3.14.el5 - Samba version Domain Controller WIN2008R2 Standard -… >>> More

Developer IT