[Samba] Re: smbusers and root privs

[Felipe Augusto van de Wiel]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 09/11/2006 12:31 PM, reader at newsguy.com escreveu:
> Felipe Augusto van de Wiel <felipe at paranacidade.org.br> writes:
>>On 09/08/2006 08:26 PM, reader at newsguy.com escreveu:
>>>Running samba-3.0.23c on Genoo linux
>>>Is it possible with smbusers to allow a windows user to have root
>>>privleges on a linux share?
>>>
>>>A stock install of samba on Gentoo ends up with an /etc/samba/smbusers
>>>file that contains this mapping:
>>>  root = administrator admin
>>>
>>>It appears then that other windows users could as well be mapped to
>>>root like:
>>>  root = administrator admin harry
>>>
>>>and since I am the only user on either linux or windows on this home
>>>network I'd like to map windows user harry to root but the above
>>>example does not accomplish that.
>>>
>>>Is there something else required?
>>
>>	Did you tried to add harry to the Domain Administrators
>>Group? (And you need netgroupmap configured to use that).
> 
> Harry is a member of the Administrators group and user accounts on the
> windows xp pro machine.  I see nothing called 
> `Domain Administrators' in the windows dialog for users and groups.

	Domain Adminitrators is a group on networks that has a
domain properly configured.


> Harry has no account on the linux machine.  Hence the need to map to a
> unix user account.  

	"admin users" and "root" (usermap) parameters has a
special combination according to your security parameter,
it is documented in the smb.conf the different situations.


> It is not at all clear what I would need to do  with `net groupmap'.

	'net groupmap' is the recommended way to have Domain
Administrators working on a Domain Network, but looks like it
is not your case.


> Can you be a bit more specific?

	It is not clear why do you want a root/Admin user in
a network that looks like to have share as security parameter.
Anyway, we probably need your smb.conf and a relevant part of
the log with loglevel/debuglevel increased.


	Kind regards,

- --
Felipe Augusto van de Wiel <felipe at paranacidade.org.br>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/           Phone: (+55 41 3350 3300)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFFBrzKCj65ZxU4gPQRAioBAJwJgLwv/cWaZlc0yjwqfJlHIHxoKQCdGebT
MFJ3VhOqOOriEFs+bU8X3/E=
=+02h
-----END PGP SIGNATURE-----