Linux File Server in Windows AD environment.

Posted on 2009-02-18
Last Modified: 2013-12-15
am trying to see AD objects from permissions on Linux Suse Enterprise file server that is running Samba and is joined to AD domain.
Have installed SFU(Services for Unix)3.5 on Windows DC.

Can browse the domain from Linux server
Can create shares on folders or printers and see them from Windows clients but can't access them because I can't grant permissions to AD objects on the linux server because all I see is the linux users/groups.

Question by:clownbird
    LVL 2

    Accepted Solution

    You have to map the Windows AD groups to groups on the linux server:

    It works like this:

    net groupmap add ntgroup="Domain Admins" unixgroup=domadm rid=512 type=d

    The unixgroup domadm must exist on the linux server.
    (you could for instance use root as the Domain Admins group on linux).

    Here is an example of a basic groupmapping:

    net groupmap add ntgroup="Domain Admins" unixgroup=root
    net groupmap add ntgroup="Domain Users" unixgroup=users
    net groupmap add ntgroup="Domain Guests" unixgroup=nobody

    Author Comment

    Would a dedicated LDAP directory simplify things, such as Tivoli DS or OpenLDAP to replicate against the AD and let the Linux server authenticate against it?  
    OR, are you saying that ultimately there has to be name mappping for each object(user and/or group) on the Linux server for to control authorization on the shares?


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    If you use Debian 6 Squeeze and you are tired of looking at the childish graphical GDM login screen that is used by default, here's an easy way to change it. If you've already tried to change it you've probably discovered that none of the old met…
    I. Introduction There's an interesting discussion going on now in an Experts Exchange Group — Attachments with no extension ( This reminded me of questions tha…
    Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    12 Experts available now in Live!

    Get 1:1 Help Now