[Samba] Administrator is Root

Felipe Augusto van de Wiel felipe at paranacidade.org.br
Thu Jan 18 16:37:38 GMT 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/18/2007 12:36 PM, ryan punt escreveu:
>>>I just got Samba + LDAP up and running as a PDC. If I list the users in
>>>the LDAP directory with pdbedit -L I see:
>>>
>>>   root:0:test
>>>   nobody:99:nobody
>>>   aster$:1001:Computer
>>>   toast$:1002:TOAST$
>>>   fordprefect:1003:Test Account
>>>
>>>Shouldn't there be an Administrator account and no root? I don't want my
>>>Linux root account even remotely confused or associated with a
>>>Samba/LDAP account. Any ideas?
>>  
>> 	It depends on how you configured your LDAP.
>> 
>> 	After Samba 3.0.14 you can have a normal user account with
>> Domain Administrator powers, which includes adding machines to the
>> domain and other privileges, using 'net groupmap'.
>> 
>> 	So you can an account as the LDAP administrator, another
>> account as your Samba Administrator and your regular root account.
>> It's up to you. ;)
> 
> But don't you need a Samba account with UID=0 to assign privileges 
> in the first place?

	Not anymore. ;)


> Ryan

	Kind regards,

- --
Felipe Augusto van de Wiel <felipe at paranacidade.org.br>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/           Phone: (+55 41 3350 3300)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFFr6JSCj65ZxU4gPQRArN2AKCI4SVmFZjbomMAvfHzVH1zq7culgCghF/k
BtQWs/php/pRQUON387KNos=
=Z758
-----END PGP SIGNATURE-----


More information about the samba mailing list