[Samba] Administrator is Root

Felipe Augusto van de Wiel felipe at paranacidade.org.br
Wed Jan 17 16:28:03 GMT 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/16/2007 06:29 PM, Jason Baker escreveu:
> I just got Samba + LDAP up and running as a PDC. If I list the users in
> the LDAP directory with pdbedit -L I see:
> 
>    root:0:test
>    nobody:99:nobody
>    aster$:1001:Computer
>    toast$:1002:TOAST$
>    fordprefect:1003:Test Account
> 
> Shouldn't there be an Administrator account and no root? I don't want my
> Linux root account even remotely confused or associated with a
> Samba/LDAP account. Any ideas?

	It depends on how you configured your LDAP.

	After Samba 3.0.14 you can have a normal user account with
Domain Administrator powers, which includes adding machines to the
domain and other privileges, using 'net groupmap'.

	So you can an account as the LDAP administrator, another
account as your Samba Administrator and your regular root account.
It's up to you. ;)

	Kind regards,

- --
Felipe Augusto van de Wiel <felipe at paranacidade.org.br>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/           Phone: (+55 41 3350 3300)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFFrk6TCj65ZxU4gPQRAuG9AKCpPWSJtkNeZ/DkiTrsDNH/6UBhBACbBeqy
bspDz6Un93BmLl5uSgMxSFs=
=98lT
-----END PGP SIGNATURE-----


More information about the samba mailing list