Adding users with usrmgr.exe

[Luke Kenneth Casson Leighton]

On Thu, 4 May 2000, Michael Glauche wrote:

> Hi,
>   there's a problem adding users to samba with usrmgr when using a
> non-root login:
> api_rpc_command: api_samr_rpc op 0x25 - api_rpc_command: SAMR_SET_USERINFO2
> 000008 samr_io_q_set_userinfo2
> prs_grow_data: 452 > 449
> samr_reply_set_userinfo2: 2197
> Found policy hnd[22] [000] 00 00 00 00 00 A3 5B 80  55 B5 BF 01 44 33 00 00
> .....[. U...D3..
> [010] 14 00 00 00                                       ....
> policy(pnum=22 ): Getting policy state
> Getting policy sid=S-1-5-21-875121446-1962601162-102799029-1000
> samr_reply_set_userinfo2: rid:0x3e8
> startfileent: unable to open file /opt/samba-tng/private/smbpasswd
> unable to open sam password database.
> 000000 samr_io_r_set_userinfo2
> create_noauth_reply: data_start: 0 data_end: 4 max_tsize: 5680
> 
> The user is in the Domain Admin group, but smbpasswd is only readable by user
> root, noone else.
> Could something like:
> if (user is in group "domain admin")
>    suid 0

no.  ah.

smbpasswd should be group 0, rw-rw---.

hmm.