[Samba] Re: smbusers and root privs

Felipe Augusto van de Wiel felipe at paranacidade.org.br
Tue Sep 12 13:57:30 GMT 2006

Hash: SHA1

On 09/11/2006 12:31 PM, reader at newsguy.com escreveu:
> Felipe Augusto van de Wiel <felipe at paranacidade.org.br> writes:
>>On 09/08/2006 08:26 PM, reader at newsguy.com escreveu:
>>>Running samba-3.0.23c on Genoo linux
>>>Is it possible with smbusers to allow a windows user to have root
>>>privleges on a linux share?
>>>A stock install of samba on Gentoo ends up with an /etc/samba/smbusers
>>>file that contains this mapping:
>>>  root = administrator admin
>>>It appears then that other windows users could as well be mapped to
>>>root like:
>>>  root = administrator admin harry
>>>and since I am the only user on either linux or windows on this home
>>>network I'd like to map windows user harry to root but the above
>>>example does not accomplish that.
>>>Is there something else required?
>>	Did you tried to add harry to the Domain Administrators
>>Group? (And you need netgroupmap configured to use that).
> Harry is a member of the Administrators group and user accounts on the
> windows xp pro machine.  I see nothing called 
> `Domain Administrators' in the windows dialog for users and groups.

	Domain Adminitrators is a group on networks that has a
domain properly configured.

> Harry has no account on the linux machine.  Hence the need to map to a
> unix user account.  

	"admin users" and "root" (usermap) parameters has a
special combination according to your security parameter,
it is documented in the smb.conf the different situations.

> It is not at all clear what I would need to do  with `net groupmap'.

	'net groupmap' is the recommended way to have Domain
Administrators working on a Domain Network, but looks like it
is not your case.

> Can you be a bit more specific?

	It is not clear why do you want a root/Admin user in
a network that looks like to have share as security parameter.
Anyway, we probably need your smb.conf and a relevant part of
the log with loglevel/debuglevel increased.

	Kind regards,

- --
Felipe Augusto van de Wiel <felipe at paranacidade.org.br>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/           Phone: (+55 41 3350 3300)
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org


More information about the samba mailing list