[Samba] Documentation Inconsistency - enable privileges

[John H Terpstra]

On Monday 30 October 2006 12:59, Roland Hordos wrote:
> Hi,
>
> In the 3.0.23c swat documentation, it indicates the default for "enable
> privileges" parameter is both yes and no.  Does anyone know what the
> actual default is?  Details below - relevant sections in CAPS.
>
> Thank you.
>
> Roland Hordos
>
>
> enable privileges (G)
>
> This parameter controls whether or not smbd will honor privileges
> assigned to specific SIDs via either net rpc rights or one of the
> Windows user and group manager tools. This parameter is DISABLED BY
> DEFAULT to prevent members of the Domain Admins group from being able to
> assign privileges to users or groups which can then result in certain
> smbd operations running as root that would normally run under the
> context of the connected user.
> An example of how privileges can be used is to assign the right to join
> clients to a Samba controlled domain without providing root access to
> the server via smbd.
> Please read the extended description provided in the Samba
> documentation.
> DEFAULT: enable privileges = yes

Thanks for pointing that out. It has been fixed in the master code tree. By 
default this parameter is enabled in all recent versions of Samba-3.0.

- John T.