samba4 rights management

Dirk Gouders gouders at
Thu Sep 29 07:18:50 MDT 2011

Matthieu Patou <mat at> writes:

> On 28/09/2011 03:26, Dirk Gouders wrote:
>> Hello,
>> I am not sure how to do correct rights management with samba4 and am
>> unsure which parts of samba3 still apply.
>> I want a user account to be able to create and modify computer accounts
>> and ideally just that.  In w2k such a user has been a member of "account
>> operators" but such a user in samba4 could not create new computer
>> accounts but only modify existing ones.  When I added the user account
>> to "domain admins" it was able to create computer accounts but that is
>> not what I want.
> I'm not sure we currently support this, having trace of this with a
> Windows DC can help us.
> Think also of creating a bug in bugzilla with clear indication of what
> you are doing.

Here is the link to the bug report with the attached tcpdump capture


More information about the samba-technical mailing list