![samba 3.6,来自活动目录的组权限,“](https://linux22.com/image/1354058/samba%203.6%EF%BC%8C%E6%9D%A5%E8%87%AA%E6%B4%BB%E5%8A%A8%E7%9B%AE%E5%BD%95%E7%9A%84%E7%BB%84%E6%9D%83%E9%99%90%EF%BC%8C%E2%80%9C.png)
我正在进行 zfs 配置测试,并尝试将服务器加入到我们的 AD 域中。据我所知,我已使用 SAMBA 3.6 成功加入域。我可以查询用户和组。但是,当我尝试将域组分配给文件夹权限时,我收到“非法组名”
另外值得注意的是,我正在使用 IDMAP_RID 来确保 GID 和 UID 的一致性,但这是我第一次实现它,所以我还很不熟悉,其余大部分内容也是如此。
顺便说一下,我在 FreeBSD 9.0 版本框上执行此操作,该框连接到 Active Directory 2003 域。
我尝试的命令是:
chown root:"DOMAIN\group" folder
该组中没有空格。对于有空格的组,我该如何格式化?
无论如何,我都无法找到我做错的事情,所以如果有人能帮忙那就太好了。
nsswitch.conf:
group: files winbind
group_compat: nis
hosts: files dns
networks: files
passwd: files winbind
passwd_compat: nis
shadow: files winbind
shells: files
services: compat
services_compat: nis
protocols: files
rpc: files
smb.conf:
workgroup = DOMAIN
netbios name = hostname
realm = DOMAIN.LOCAL
server string = hostname
security = ADS
allow trusted domains = No
idmap backend = idmap_rid:KPAK=100000-999999
idmap uid = 100000-999999
idmap gid = 100000-999999
template shell = /bin/bash
winbind use default domain = Yes
winbind enum users = No
winbind enum groups = No
winbind nested groups = Yes
printer admin = "Domain Admins"
create mask = 2770
directory mask = 2770
read only = no
log file = /var/log/samba/log.%m
log level = 2 winbind:3
hosts allow = internal ip ranges incl vpn ip's
dns proxy = no