[Samba] privileges in 3.11?

Gerald (Jerry) Carter jerry at samba.org
Thu Feb 3 13:09:21 GMT 2005

Hash: SHA1

Dmitry Melekhov wrote:
| I try to assing privileges in 3.11 and get error.
| If  I try to do this from root:
| net -S dm -U root rpc rights grant  'TEST\mail'
|  SeMachineAccountPrivilege
| Password:
| Failed to grant privileges for TEST\dm (NT_STATUS_ACCESS_DENIED)

In the 3.0.11rpre2 and rc1, only a member of the 'Domain Admins'
group could assign rights.  Volker pointed out that it was probably
confusing not to allow root to manage privileges as well since we
allow root to do everything else.  So that has been fixed for the
final 3.0.11 release.

| Or, if I do this from user, which is in Domain Admins group:
| /net -S dm -U dm rpc rights grant  'TEST\mail'
|   SeMachineAccountPrivilege
| Password:
| Could not connect to server dm

This is an error from the net command itself (not related
to rpc rights).  Have you look at the level 10 debug log from
this second failure?

cheers, jerry
Alleviating the pain of Windows(tm)      ------- http://www.samba.org
GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
"I never saved anything for the swim back."     Ethan Hawk in Gattaca
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org


More information about the samba mailing list