acls winbind samba and unix groups

[CyberNerd]

I need to change the group owner to "07, 06" etc....

 

wbinfo -g | grep 07
07

07 exists from winbind !

 

 

setfacl  -R -m group:"07":r-x ./07

 

getfacl 07
# file: 07
# owner: root
# group: domain\040admins
user::rwx
group::r-x
group:lp:r-x                   
group:teachers:rwx
group:support\040staff:rwx
mask::rwx
other::---

 

It doesn't change the group to "07" - instead it changes it to lp (lineprinter) group. Same with 03,04,05,06 respectively.

 

grep lp /etc/passwd
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin

ha - group 7. I can see its' obviously picking up the unix groups, not the windows ones. It DOES work for other windows groups (teachers, support staff, domain admins as above)

 

I tried deleting the winbind cache, restarting winbind etc..

 

any ideas? It seems to be a new phenomena.

 

 

TIA

[CyberNerd]

oh: RHEL 5.4 recent upgrade from 5.3 - don't recall it doing this on a previous version....

[webman]

What about?

 

$ getent group | grep 07

 

Or setfacl with domain\07 instead of just 07?

[powdarrmonkey]

I didn't think you could have groups named as integers, for exactly the reason you've found. year07 or something might be better.

[CyberNerd]

 

Or setfacl with domain\07 instead of just 07?

 

[root@student shared]# setfacl  -R -m group:"CURRIC\07":r-x ./07
[root@student shared]# getfacl 07/
# file: 07
# owner: root
# group: domain\040admins
user::rwx
group::r-x
group:lp:r-x
group:07:r-x
group:teachers:rwx
group:support\040staff:rwx
mask::rwx
other::---

 

Thanks Webman! "domain\07" worked !

[webman]

Cool