You are not logged in.
I recently setup active directory integration on my arch laptop. Followed the wiki (https://wiki.archlinux.org/index.php/Ac … ntegration). Everything is working correctly, I can login as my AD user, it creates a home directory, I can use sudo, etc, etc.
The issue I can't solve is files created by AD users are owned by $username:domain-users. All the files in my homedir are readable by the domain-users group, which is the group everyone is apart of. Anyone can just log into my laptop and read my whole homedir. This is not ideal.
I'd like to have new files owned by $username:$username. But I can't find how to change this. Changing the default group on my username doesn't work, because it doesn't exist locally. I'll be happy to share my samba and winbind configs, but they were copy and pasted from the wiki.
Anyone have any ideas how to change this?
Offline