CVS update: samba/source/passdb

Jean Francois Micouleau Jean-Francois.Micouleau at dalalu.fr
Tue Dec 12 11:11:39 GMT 2000


On Tue, 12 Dec 2000, David Bannon wrote:

> On Tue, 28 Nov 2000, we wrote:
> >> 1. An admin user other than root being allowed to join a machine to the
> >> domain. (Root can do this in W2K but on NT4 no one can, so it might be two
> >> seperate issues.) 
> 
> Jean Francois, have you been working on this ? I just noticed that the
> second part of that statement is not true anymore. That is, root can return
> a NT machine onto the domain.

yep. I fixed the parsing of user_info_21 and user_info_23.

> Remaining issues :
> 
> A) Domain Admins (other than root) allowed to join a machine to domain.

I don't want to simply allow domain admins more power.

I want something reliable and flexible. Basically that's a group mapping
backend which will also store some group's privilege.

> C) As above for running the  'Add user script'.

ditto as above.

> B) Have the 'Add user script' put a '$' at the end of new machine accounts.


J.F.






More information about the samba-ntdom mailing list