[Samba] builtin groups are not mapped by winbind
Rowland Penny
rpenny at samba.org
Fri May 20 14:30:02 UTC 2022
On Fri, 2022-05-20 at 11:01 -0300, Anderson Sampaio Mello via samba
wrote:
> Hello Rowland.
>
> > It isn't a problem, for those are WINDOWS groups and are not used
> > on
> > Unix, so why do you need to map them ?
>
> I want to map the BUILTIN groups to use them.
Why ?
>
> As for not being used on unix, then why are other BUILTIN groups like
> "BUILTIN\Administrators", "BUILTIN\Guests", "BUILTIN\Users"
> automatically
> mapped?
Because they are Unix groups that are very similar:
Administrators --> the 'root' group
Guests --> the 'nobody' or 'nogroup' group
Users --> the 'users' group
For 'BUILTIN\Guests' you should be using 'Domain Guests'
For 'BUILTIN\Users' you should be using 'Domain Users'
The other BUILTIN groups:
Account Operators
Server Operators
Print Operators
Backup Operators
Replicators
are only meant to be used on a DC.
Rowland
More information about the samba
mailing list