list of supported privileges in 3.0.11

Andreas Hasenack andreas at conectiva.com.br
Mon Jan 17 17:19:26 GMT 2005


On Mon, Jan 17, 2005 at 11:14:29AM -0600, Gerald (Jerry) Carter wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> This is what I have planned.  let me know if you have
> any other suggestions.  Not all of them are done yet.
> 
> * SeMachineAccountPrivilege - 	join client machines to the domain
> * SePrintOperatorPrivilege  - 	print admin rights
> * SeRemoteShutdownPrivilege - 	shutdown server (net rpc shutdown)
> * SeServerOperatorPrivilege - 	add/modify/remove shares, modify
> 				share acls, etc...
> * SeAddUsersPrivilege       -	add add/remove/modify users and
> 				groups
> 
> I'm also going to include a new smb.conf option 'enable privileges'
> which will default to 'no' since all Domain Admins will now posses
> the right to modify the privileges associated with a SID.
> 
> Other ideas?

Could this help https://bugzilla.samba.org/show_bug.cgi?id=1773 somehow?



More information about the samba-technical mailing list