pam auth via winbind, howto map primary group for users?

Posted by dr gonzo on Server Fault See other posts from Server Fault or by dr gonzo
Published on 2012-09-06T12:21:16Z Indexed on 2012/09/06 15:40 UTC
Read the original article Hit count: 253

Filed under:

active-directory

|

groups

|

mapping

|

winbind

I have unix users authenticating to an PDC (via winbind) and want to have the primary group of those users a local unix group (e.g. www-data).

users have the group "domain users" with gid 10006 (as the gid winbind mapping)

idmap uid = 10000-20000
idmap gid = 10000-20000
winbind enum groups = yes
winbind enum users = yes
winbind use default domain = yes
winbind nested groups = yes

but want that the primary group is 33 for all users (www-data)

how to achieve that?

© Server Fault or respective owner

Related posts about active-directory

Can't join OS X Mavericks to AD Domain

as seen on Server Fault - Search for 'Server Fault'
I'm attempting to join an OS X Mavericks (10.9) client to a Windows Server 2008 Active Directory domain, however the bind fails with this error in the OS X client's system.log: Oct 24 15:03:15 host.domain.com com.apple.preferences.users.remoteservice[5547]: -[ODCAddServerSheetController handleOtherActionError:… >>> More
Retrieve user details from Active Directory using SID

as seen on Server Fault - Search for 'Server Fault'
Hi, How can I find a user in my AD when I have his/her SID. I don't want to rely on other attributes, since I am trying to detect changes to these. Example: I get a message about a change to user record containing: Message: User Account Changed: Target Account Name: test12 Target… >>> More
Retrieve user details from Active Directory using GUID

as seen on Server Fault - Search for 'Server Fault'
Hi, How can I find a user in my AD when I have his/her GUID. I don't want to rely on other attributes, since I am trying to detect changes to these. >>> More
Retrieve user details from Active Directory using GUID [closed]

as seen on Super User - Search for 'Super User'
Hi, How can I find a user in my AD when I have his/her GUID. I don't want to rely on other attributes, since I am trying to detect changes to these. >>> More
Office365 DirSync Active Directory Integration

as seen on Server Fault - Search for 'Server Fault'
I am preparing to deploy Office365 for my organization. We have an on premise Active Directory Domain Controller (Windows Server 2012 R2). We would like to leverage our Active Directory for: automatic user provisioning in Office365, and password synchronization, using the DirSync tool. Our Active… >>> More

Related posts about groups

Openldap, groups, admin groups, etc

as seen on Server Fault - Search for 'Server Fault'
We have a samba server as PDC with OpenLDAP. So far everything is working, even windows 7 can log on to the Domain. Here is the tricky part. We have many departments, each department has it's own IT guys, and these IT guy should be able to create users in their department and change any info of the… >>> More
get local groups and not the primary groups for a domain user

as seen on Stack Overflow - Search for 'Stack Overflow'
i have a code to get the groups a user belongs to. try { DirectoryEntry adRoot = new DirectoryEntry(string.Format("WinNT://{0}", Environment.UserDomainName)); DirectoryEntry user = adRoot.Children.Find(completeUserName, "User"); object… >>> More
Creating and using VM Groups in VirtualBox

as seen on Oracle Blogs - Search for 'Oracle Blogs'
With VirtualBox 4.2 we introduced the Groups feature which allows you to organize and manage your guest virtual machines collectively, rather than individually. Groups are quite a powerful concept and there are a few nice features you may not have discovered yet, so here's a bit more information… >>> More
Security in OBIEE 11g, Part 2

as seen on Oracle Blogs - Search for 'Oracle Blogs'
Continuing the series on OBIEE 11g, our guest blogger this week is Pravin Janardanam. Here is Part 2 of his overview of Security in OBIEE 11g. OBIEE 11g Security Overview, Part 2 by Pravin Janardanam In my previous blog on Security, I discussed the OBIEE 11g changes regarding Authentication mechanism… >>> More
Customer Shares Software Ownership Experience and the Benefits of Being Involved in User Groups

as seen on Oracle Blogs - Search for 'Oracle Blogs'
Floyd Teter, Jet Propulsion Lab, System Engineer for Institutional Business Systems, speaks with Cliff about the value of OAUG membership, his perception of Oracle's Fusion Applications Strategy, and the benefits from Oracle's Applications Unlimited commitment. >>> More