[Samba] Documentation Inconsistency - enable privileges
John H Terpstra
jht at samba.org
Tue Oct 31 04:55:47 GMT 2006
On Monday 30 October 2006 12:59, Roland Hordos wrote:
> In the 3.0.23c swat documentation, it indicates the default for "enable
> privileges" parameter is both yes and no. Does anyone know what the
> actual default is? Details below - relevant sections in CAPS.
> Thank you.
> Roland Hordos
> enable privileges (G)
> This parameter controls whether or not smbd will honor privileges
> assigned to specific SIDs via either net rpc rights or one of the
> Windows user and group manager tools. This parameter is DISABLED BY
> DEFAULT to prevent members of the Domain Admins group from being able to
> assign privileges to users or groups which can then result in certain
> smbd operations running as root that would normally run under the
> context of the connected user.
> An example of how privileges can be used is to assign the right to join
> clients to a Samba controlled domain without providing root access to
> the server via smbd.
> Please read the extended description provided in the Samba
> DEFAULT: enable privileges = yes
Thanks for pointing that out. It has been fixed in the master code tree. By
default this parameter is enabled in all recent versions of Samba-3.0.
- John T.
More information about the samba