How do you make a domain admin?

Luke Kenneth Casson Leighton lkcl at switchboard.net
Wed Dec 9 23:31:49 GMT 1998


1. [Text: vcard.vcf] (429bytes) "Card for John Burchett"
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ argh!!!

On Thu, 10 Dec 1998, John Burchett wrote:

> Luke,
> 
> I am having trouble setting up an admin account. Samba is my PDC, NT my
> client, and I can now successfully log in as several users, including
> 'root'. However, when I go to the User Manager and try to view user
> profile information, it tells me 'access denied' - also for other admin
> stuff like certain options on the NET command. These are the measures I
> have already done to setup an admin
> 
> domain admin group = root

this option is no longer in samba 2.1 pre-alpha.

> domain user map = ... file which contains
>     adm    Domain Admins
>     root    Administrators

you need:

domain group map = ... file which contains
adm="Domain Admins"

and:

local group map = ... file which contains
wheel="Administrators"

and:
domain user map = ... file which contains
root=Administrator

and IMPORTANTLY:
private/smbpasswd file which contains
root:.....

NOT, repeat NOT:
administrator:....


then in /etc/group, any users that you want to be local administrators
must be in wheen, and anyu users that you want to be domain admins must be
in adm.



More information about the samba-ntdom mailing list