unable to grant print operator privileges + workaround

David Mansfield samba at dm.cobite.com
Tue Dec 23 12:24:36 MST 2014

Hi All,

I was trying to follow the wiki 
and the command there didn't (doesn't?) work.  My system is set up with 
security = ads, but neither -Uadministrator nor -U'DOMAIN\administrator' 

The workaround which I eventually found, and which I suggest be 
documented in said wiki page, was to set a local password for "root" 
user with smbpasswd -a root, then temporarily switch to "security = 
user", restart samba,  grant the privs., then switch back to "security = 

I'm not sure why the password is not accepted.  When I use my own creds. 
(instead of -Uadministrator, I use -Ume) it accepts the credentials but 
the error message changes to NT_STATUS_ACCESS_DENIED.

At least the archives will have this solution and hopefully it'll be 
easier to find for the next guy/gal.

Additional information:

System is centos 7, samba installed from distro packages (4.1.1-37).  
Kerberos is set up and working (smbclient -k works). UNIX authentication 
and nss is via sssd which is set up and working.

My DC are all samba 4.1.12 compiled from source.

David Mansfield
Cobite, INC.

More information about the samba-technical mailing list