svn commit: samba-docs r333 - in trunk/smbdotconf/logon: .

[jerry at samba.org]

Author: jerry
Date: 2005-01-21 20:28:01 +0000 (Fri, 21 Jan 2005)
New Revision: 333

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba-docs&rev=333

Log:
add entry for 'enable privileges'
Added:
   trunk/smbdotconf/logon/enableprivileges.xml


Changeset:
Added: trunk/smbdotconf/logon/enableprivileges.xml
===================================================================
--- trunk/smbdotconf/logon/enableprivileges.xml	2005-01-21 14:07:17 UTC (rev 332)
+++ trunk/smbdotconf/logon/enableprivileges.xml	2005-01-21 20:28:01 UTC (rev 333)
@@ -0,0 +1,24 @@
+<samba:parameter name="enable privileges"
+                 context="G"
+		 type="boolean"
+                 advanced="1" developer="1"
+                 xmlns:samba="http://samba.org/common">
+<description>
+	<para>This parameter controls whether or not smbd will honor
+        privileges assigned to specific SIDs via either <command>net rpc rights</command>
+        or one of the Windows user and group manager tools.  This parameter is 
+	disabled by default to prevent members of the Domain Admins group from 
+	being able to assign privileges to user which can then result in certain
+	smbd operations running as root that would normally run under the context 
+	of the connected user.  </para>
+
+	<para>An example of how privileges can be used is to assign
+	the right to join clients to a Samba controller domain without
+	providing root access to the server via smbd.</para>
+
+	<para>Please read the extended description provided in the
+	Samba documentation before enabling this option.</para>
+
+</description>
+<value type="default">no</value>
+</samba:parameter>