svn commit: samba-docs r360 - in trunk/Samba-HOWTO-Collection: .

jht at samba.org jht at samba.org
Sun Feb 13 22:40:54 GMT 2005


Author: jht
Date: 2005-02-13 22:40:53 +0000 (Sun, 13 Feb 2005)
New Revision: 360

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-docs&rev=360

Log:
Adding clarification for post 3.0.10 versions.
Modified:
   trunk/Samba-HOWTO-Collection/Group-Mapping.xml


Changeset:
Modified: trunk/Samba-HOWTO-Collection/Group-Mapping.xml
===================================================================
--- trunk/Samba-HOWTO-Collection/Group-Mapping.xml	2005-02-13 00:46:21 UTC (rev 359)
+++ trunk/Samba-HOWTO-Collection/Group-Mapping.xml	2005-02-13 22:40:53 UTC (rev 360)
@@ -219,6 +219,27 @@
 	</orderedlist>
 
 	<para>
+	Versions of Samba up to and including 3.0.10 do not provide a means for assigning rights and privileges
+	that are necessary for system administration tasks from a Windows Domain Member Client machine so that
+	domain administration tasks such as adding/deleting/changing user and group account information, and
+	managing workstation domain membership accounts, can be handled by any account other than root.
+	</para>
+
+	<para>
+	Samba-3.0.11 introduced a new privilege management interface (see <link linkend="rights">Chapter on Rights and Privileges</link>)
+	that permits these tasks to be delegated to non-root (i.e.: accounts other than the equivalent of the
+	MS Windows Administrator) account.
+	</para>
+
+	<para>
+	Administrative tasks on a Windows Domain Member workstation, can be done by anyone who is a member of the
+	<constant>Domain Admins</constant> group. This group can be mapped to any convenient UNIX group.
+	</para>
+
+	<sect3>
+	<title>Applicable Only to Version Earlier than 3.0.11</title>
+
+	<para>
 	Administrative tasks on UNIX/Linux systems, such as adding users or groups, requires <constant>root</constant>
 	level privilege. The addition of a Windows client to a Samba Domain involves the addition of a user account
 	for the Windows client.
@@ -240,10 +261,7 @@
 	level ACLs.
 	</para>
 
-	<para>
-	Administrative tasks on a Windows Domain Member workstation, can be done by anyone who is a member of the
-	<constant>Domain Admins</constant> group. This group can be mapped to any convenient UNIX group.
-	</para>
+	</sect3>
 
 	</sect2>
 



More information about the samba-cvs mailing list