Hai Paul,
> I had tried to build Samba 4.9.1 the "Debian way", following > the method > in the "experimental" packages, but failed on my "stretch" machine due > to some version incompatibility issues. Post your problem/question on the samba list and we will analize this problem. And if you want a samba 4.9.1 on stretch, you can use the build i make for the samba list users. Of the my changes for a stretch build and build it yourself. Instructions can be found at http://apt.van-belle.nl And have you seen the list of changes between 4.5 and 4.9 its enormus. Smb.conf did also change a lot and without smb.conf there is nothing check if your setup is ok. I really suggest you also have look at https://wiki.samba.org/index.php/User_Documentation For the upgrade from 4.5 to 4.9. So a summerized version of all smb.conf changes : https://downloads.van-belle.nl/samba4/Upgrade-info.txt As of 4.1 upto 4.9. My first guess,, your idmap config setup is wrong. Or post you smb.conf here and i'll have a look, or post it to the samba list, it a very active list. Best regards, Louis > -----Oorspronkelijk bericht----- > Van: Pkg-samba-maint > [mailto:pkg-samba-maint-bounces+belle=bazuin.nl@alioth-lists.d > ebian.net] Namens Paul Szabo > Verzonden: dinsdag 30 oktober 2018 0:24 > Aan: Mathieu Parent; 912...@bugs.debian.org > Onderwerp: [Pkg-samba-maint] Bug#912193: Bug#912193: samba: > Ignores UNIX groups > > Dear Mathieu, > > > Why your UNIX groups don't match your Windows groups? This > is usually the case, with nss_winbind. > My site is mainly Linux; we have secondary groups in the /etc/group > file. I am trying to move from Samba3 to the Debian Samba4, setting up > Samba as an AD DC (for Windows10). I have the libnss-winbind package. > Still, Samba (winbidd?) seems to create separate > "Domain\user" entities, > and does seem to add those to the groups that the Linux user > belongs to. > > > Alternatively, you can reverse the logic with idmap_nss. > > I tried that, did not seem to help. > > >> (Seems to me that Samba4.9 suffers from the same issue.) > > Have you tried it? ... > > I had tried to build Samba 4.9.1 the "Debian way", following > the method > in the "experimental" packages, but failed on my "stretch" machine due > to some version incompatibility issues. (Did not try the "native way" > with configure/make, thought it would be best to follow Debian.) It is, but you need more then the package on stretch. > > > ... This part of the code has changed a lot. > > The file source3/auth/auth_util.c did not change that much between > 4.5.12 and 4.9.1, the "essence" of my patch still seems to apply > (though not the patch file I posted). > > > Also please note that we don't accept patches that are not merged > > upstream first. > > Additionnaly, this patch target stable while it's not a security or > > stability patch. > > Understood. I have been using my own Samba for years, can keep doing > that. > > Cheers, Paul > -- > Paul Szabo p...@maths.usyd.edu.au > http://www.maths.usyd.edu.au/u/psz/ > School of Mathematics and Statistics University of Sydney > Australia > _______________________________________________ > Pkg-samba-maint mailing list > pkg-samba-ma...@alioth-lists.debian.net > https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-s > amba-maint >