I have a Debian 6 system running Samba 3.5.6 that has been successfully set up to authenticate against an Active Directory domain (via SSH that is). I have a directory (let's call it /foo) that I want to be editable by both local users and AD users. I have created a local group "fooedit" and added both the local users and domain users to it. I have set up the neccessary ACLs on /foo to allow fooedit users to edit the files and tested it to be functioning via SSH for both the local and AD users.
I would like the AD users to be able to edit via share as well, but can't seem to get the right configuration. They can see the share, but it prompts them for credentials when trying to access it and credentials don't work. Is this possible and if so what do I need to do it? I don't want to do this with an AD group if possible because I may need to do this on many machines with different users on each machine, so a local group would be cleaner.
[foo] path = /foo writeable = yes browseable = yes valid users = @fooedit
# file: foo # owner: bar # group: fooedit # flags: -s- user::rwx group::rwx mask::rwx other::--- default:user::rwx default:group::rwx default:other::---
... fooedit:x:69:adsuser ...
... and go!