[Samba] User Management / Samba 3.0.1 LDAP / USERMGR.EXE problems

John H Terpstra jht at samba.org
Tue Jan 6 19:33:26 GMT 2004


You must log onto the Samba domain as the user 'root', as Domain
Administrator you need to have permission to add users. In UNIX that
requires 'root' privilege.

If you still have a problem, contact me direct.

John T.

On Tue, 6 Jan 2004, Toby Schaefer wrote:

> Hello,
>   I'm using Samba 3.0.1 with LDAP backend running as a PDC here.  When I
> start up usrmgr.exe from Windows NT, it will read all the users (or
> computers, for srvmgr.exe) in the domain and report them back correctly.
> However, whomever I am logged in as ( including gid 512 users) it will not
> let me see details or change anything.  In the logs after trying to view a
> users details I will get (hand typed from across the room, so forgive the
> lack of log lines):
> rpc_server/src_samr_nt.c:access_check_samr_object(93) _samr_open_user:
> ACCESS DENIED (requested: 0x00601bf)
> Before that it does access  checks se_access_check  of different SID
> variations, ending in also S-1-5-21-.......-512.
> Does anyone have any idea why it is not enabling me to use the usrmgr.exe to
> manage users?  The scripts work great as far as I am concerned, but with the
> school I work for enrolling new students soon, I need a "counselor level"
> tool that they can do simple tasks with. :)  If not, does anyone have any
> recommendations for other gui / cheesy user management that will run on
> windows?
> Thanks in advance!
> Toby Schaefer

John H Terpstra
Email: jht at samba.org

More information about the samba mailing list