[Samba] privileges in 3.11?

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dmitry Melekhov wrote:
|
| I try to assing privileges in 3.11 and get error.
| If  I try to do this from root:
|
| net -S dm -U root rpc rights grant  'TEST\mail'
|  SeMachineAccountPrivilege
| Password:
| Failed to grant privileges for TEST\dm (NT_STATUS_ACCESS_DENIED)

In the 3.0.11rpre2 and rc1, only a member of the 'Domain Admins'
group could assign rights.  Volker pointed out that it was probably
confusing not to allow root to manage privileges as well since we
allow root to do everything else.  So that has been fixed for the
final 3.0.11 release.

| Or, if I do this from user, which is in Domain Admins group:
|
| /net -S dm -U dm rpc rights grant  'TEST\mail'
|   SeMachineAccountPrivilege
| Password:
| Could not connect to server dm

This is an error from the net command itself (not related
to rpc rights).  Have you look at the level 10 debug log from
this second failure?




cheers, jerry
=====================================================================
Alleviating the pain of Windows(tm)      ------- http://www.samba.org
GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
"I never saved anything for the swim back."     Ethan Hawk in Gattaca
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCAiKBIR7qMdg1EfYRAq0DAKCqqO/CMIFfF5wqdHEUYCDE7/fgNgCg13Lc
7KDZ7jAsl1BNLzrwCrqS8fs=
=wVqL
-----END PGP SIGNATURE-----