unable to grant print operator privileges + workaround
samba at dm.cobite.com
Tue Dec 23 12:24:36 MST 2014
I was trying to follow the wiki
and the command there didn't (doesn't?) work. My system is set up with
security = ads, but neither -Uadministrator nor -U'DOMAIN\administrator'
The workaround which I eventually found, and which I suggest be
documented in said wiki page, was to set a local password for "root"
user with smbpasswd -a root, then temporarily switch to "security =
user", restart samba, grant the privs., then switch back to "security =
I'm not sure why the password is not accepted. When I use my own creds.
(instead of -Uadministrator, I use -Ume) it accepts the credentials but
the error message changes to NT_STATUS_ACCESS_DENIED.
At least the archives will have this solution and hopefully it'll be
easier to find for the next guy/gal.
System is centos 7, samba installed from distro packages (4.1.1-37).
Kerberos is set up and working (smbclient -k works). UNIX authentication
and nss is via sssd which is set up and working.
My DC are all samba 4.1.12 compiled from source.
More information about the samba-technical