Topic: sme7 as samba client to another sme7 [resolved]

[tariqf]

I have 2 sme7 boxes and have joined one to the other as a client by following  http://tech.canterburyschool.org/tech/UbuntuWorkstations and applying it to sme.

Now that part worked fine and I can see the groups and users of the domain with "wbinfo -u" and "wbinfo -g" from my sme7 client box. I can also browse to see the Primary share on the client from a windows machine in the domain using my username and password. The problem is how do I apply permissions to ibays on my sme7 client box that use users from the other sme7 domain to which it is joined?

Obviosly it doesn't list the domain accounts in server manager, and I also tried to manually add permissions with chown but the client sme7 does not recognise domain users this way.

Please can anyone advise?

[tariqf]

ok it's working perfectly now - I just changed permissions and it works perfect with chown domainuser:domainuser to the ibay in question. Now I have sme7 acting nicely and using permissions for it's ibays from another sme7 box.

[mmccarn]

Question:  is "domainuser:domainuser" a literal quote, or am I supposed to replace "domainuser" with the name of one of my domain user accounts?

If "domainuser:domainuser" is a literal quote then are you granting equal access to all authenticated users, or is there some sort of samba magic going on in the background?

[cactus]

Question:  is "domainuser:domainuser" a literal quote, or am I supposed to replace "domainuser" with the name of one of my domain user accounts?

If "domainuser:domainuser" is a literal quote then are you granting equal access to all authenticated users, or is there some sort of samba magic going on in the background?

I guess this is just an example, you can replace the domainuser with a desired group or user available on your server.

The domain users (this is a windows name, the group description in SME) are all in the group called shared (on SME) by default, if you want everyone on the domain to be able to access the share set it be "shared:shared".