[Samba] prevent "delete user script" to delete special Samba user

Niels Peuyn peuyn at npy.oberon.net
Thu Jan 4 13:32:20 GMT 2007


Hello Jerry,

> 
> The delete user script only manages the Unix account.  The
> passdb entry permissions are handled by the SeAddUsersPrivilege
> (or connecting as root).  There is no current per user security
> descriptor that would give the kind of control you want without
> modifying the source.
> 

is it right, that the source in 
"passdb/pdb_interface.c:smb_delete_user"
will control user deletion?

Thank you very much for this information
Niels Peuyn
  Oberon.net GmbH	Tel: 	+49 211 179253-0
  Georg-Glock-Str. 8	Direct: +49 211 179253-17
  40474 Duesseldorf	Fax: 	+49 211 450 656



More information about the samba mailing list