[Samba] Re: Cannot get DOMAIN ADMINS to work

Heinrich Rebehn rebehn at ant.uni-bremen.de
Sat Dec 11 15:00:02 GMT 2004


Jim C. wrote:
> | After reading a lot in the mailing list and the official Samba 3 howto,
> | i am still unable to give domain admin rights to a user, so that he gets
> | admin rights on all workstations in the domain.
> |
> | Here is what i have:
> 
> 1. If you are using ldap, you should know that the posixgroup
> objectClass is out of date and that you will need a different
> objectClass to provide Administrative access to the LDAP database
> itself. Specifically, groupOfNames.
> 

LDAP is only used by the Unix system. Samba does not use LDAP, it is 
even compiled w/o LDAP support. So, as long as getgrent(3) shows that a 
user is in the ntadmin group, the user should get admin rights.

--Heinrich


More information about the samba mailing list