[Samba] User problems with Samba 2.2.3

[Brian Whitehead]

I am saying that you would sit at the client and add the Samba user account
to the local client group.  There might be a way to use 'User Manager for
Domains' to connect to these clients remotely.  This used to not be
possible, but I believe it works now.  The other option would be to use a
perl script to add these accounts to the local group remotely or even within
a logon script.  Unfortunately, as far as I know there is not a way to
manage the local client groups or permissions from the Samba server.  You
might be able to do something with mandatory policies or registry merges,
but unlikely as far as group membership goes.  With using Samba as a PDC, it
doesn't have any control over the local client groups.

Now, my most recent setup is using winbind against a Win2K domain
controller.  It works nicely, because I can manage the accounts from the
server and use Group Policies.  The Samba server gets the accounts via
winbind for authentication.  But since you are trying to move completely
away from Windows for your servers you will have to resort to doing some
coding to get some of the extra functionality.  Perl works nicely for these
situations because there are many Win32 modules that can do most of the
management you want.

--
Brian


----- Original Message -----
From: "Peter Erickson" <redlamb at redlamb.net>
To: "Brian Whitehead" <bwhitehd at earthlink.net>; "Samba List"
<samba at lists.samba.org>
Sent: Thursday, April 04, 2002 12:40 AM
Subject: Re: [Samba] User problems with Samba 2.2.3


>
> Thanks for the response, but I'm a little confused on what you are saying
to do here. I noticed the group 'Power Users' and I do believe that its wha
ti want, but im not too sure how to do this setup. Are you sayin to login to
each client and add the domain user (setup on the samba server) to the local
group on the client? Isnt there a way to setup something through the Samba
server and poledit so that i dont need to do it locally on every machine, or
is this one of the things that I just need to live with for the time being?
Thanks again for the response.
>
> --
> Peter
>
> On Wed, Apr 03, 2002 at 08:43:56PM -0600, Brian Whitehead said:
> > You should be able to add the domain user account (that is on the Samba
> > server) into a local group that has the permissions that you want.  On a
> > Win2K client there is a 'Power Users' group that would do what you want.
On
> > NT you can create a similar account.
> >
> > --
> > Brian
> >
> > ----- Original Message -----
> > From: "Peter Erickson" <redlamb at redlamb.net>
> > To: "Samba List" <samba at lists.samba.org>
> > Sent: Wednesday, April 03, 2002 1:07 PM
> > Subject: [Samba] User problems with Samba 2.2.3
> >
> >
> > > I have a problem that im not too sure if its a samba issue or
something
> > else. I am in the process of converting my Win2k server to a samba
server.
> > The restrictions on the machines here are really lose and we allow the
users
> > to install onto their machines... the only thing that they arent allowed
to
> > do is any of the the admin type things, such as adding users, etc. My
> > problem is that none of the normal users (ones that arent listed in the
> > domain admin group) are able to install anything or change other things.
I
> > thought that it might have to do with NT groups, but by everything that
I
> > have seen, Samba 2.2.3 doesnt really have NT groups. Does anyone have
any
> > ideas on how to fix this?
> > >
> > > Thanks in advance.
> > >
> > > --
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions:  http://lists.samba.org/mailman/listinfo/samba
> > >
> >
> >
>