Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to set add Active directory groups, to various different groups on an Ubuntu (11.10) box.

I've managed to get it to accept Active Directory users, but when I try adding AD Groups to etc\groups\ there is no joy..

share|improve this question
up vote 3 down vote accepted

Groups in *nix (that includes Ubuntu) cannot contain other groups.

AD groups are available as regular groups if you have AD membership configured correctly, try

getent group

and see if the groups are listed, if yes, then you can use them directly:

chgrp ad-group-A /some/dir
share|improve this answer

You should take a look at PowerBroker Identity Services (formerly Likewise Open). There's an Open edition and an Enterprise edition, they allow much more fine-grained mapping of AD groups then is possible just using Winbind for AD membership. The Enterprise edition gives you complete control over group policy. But the Open edition covers 99% of the cases I require on a day to day basis. I highly recommend looking at the documentation for PowerBroker to see if it will be a good fit for your use case.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.