[Samba] Re: smbusers and root privs
Felipe Augusto van de Wiel
felipe at paranacidade.org.br
Tue Sep 12 13:57:30 GMT 2006
-----BEGIN PGP SIGNED MESSAGE-----
On 09/11/2006 12:31 PM, reader at newsguy.com escreveu:
> Felipe Augusto van de Wiel <felipe at paranacidade.org.br> writes:
>>On 09/08/2006 08:26 PM, reader at newsguy.com escreveu:
>>>Running samba-3.0.23c on Genoo linux
>>>Is it possible with smbusers to allow a windows user to have root
>>>privleges on a linux share?
>>>A stock install of samba on Gentoo ends up with an /etc/samba/smbusers
>>>file that contains this mapping:
>>> root = administrator admin
>>>It appears then that other windows users could as well be mapped to
>>> root = administrator admin harry
>>>and since I am the only user on either linux or windows on this home
>>>network I'd like to map windows user harry to root but the above
>>>example does not accomplish that.
>>>Is there something else required?
>> Did you tried to add harry to the Domain Administrators
>>Group? (And you need netgroupmap configured to use that).
> Harry is a member of the Administrators group and user accounts on the
> windows xp pro machine. I see nothing called
> `Domain Administrators' in the windows dialog for users and groups.
Domain Adminitrators is a group on networks that has a
domain properly configured.
> Harry has no account on the linux machine. Hence the need to map to a
> unix user account.
"admin users" and "root" (usermap) parameters has a
special combination according to your security parameter,
it is documented in the smb.conf the different situations.
> It is not at all clear what I would need to do with `net groupmap'.
'net groupmap' is the recommended way to have Domain
Administrators working on a Domain Network, but looks like it
is not your case.
> Can you be a bit more specific?
It is not clear why do you want a root/Admin user in
a network that looks like to have share as security parameter.
Anyway, we probably need your smb.conf and a relevant part of
the log with loglevel/debuglevel increased.
Felipe Augusto van de Wiel <felipe at paranacidade.org.br>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----
More information about the samba