Win2k Domain logon RPC Code

Andrew Bartlett abartlet at pcug.org.au
Thu May 10 13:40:00 GMT 2001


Jean Francois Micouleau wrote:
> 
> On Thu, 10 May 2001, Andrew Bartlett wrote:
> 
> > It looks like we just need to do exactly the oppisite to what the
> > comment says, ie add the become_root() unbecome_root(), but just add a
> > check that the user is a domain admin.  We should also create a new
> > paramater in smb.conf, 'add machine account script', so new machines and
> > users are done differently.
> >
> > I don't mind helping out with some of the implementaion/testing, as this
> > is one of the things that rather interests me - I would prefer never to
> > login to samba as root.
> >
> > If there are any traps in this, could the relevent person give a yell
> > please?
> 
> don't do that. wait for the complete group mapping code. Then it'll be far
> easier to give the "join workstation to the domain" privilege to some
> users.
> 
>         J.F.

Sounds good to me.  BTW, what is the approximate timeline for that?  Its
another thing I have rather an interest in since I had to abandon TNG
for stablity/scaleablity reasons (TNG used n^3 algorithms for smbpasswd,
and I had 300 users).  I'm interested in testing both.

Andrew Bartlett
abartlet at pcug.org.au

-- 
Andrew Bartlett
abartlet at pcug.org.au




More information about the samba-technical mailing list