[Samba] Administrator is Root
Felipe Augusto van de Wiel
felipe at paranacidade.org.br
Thu Jan 18 16:37:38 GMT 2007
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 01/18/2007 12:36 PM, ryan punt escreveu:
>>>I just got Samba + LDAP up and running as a PDC. If I list the users in
>>>the LDAP directory with pdbedit -L I see:
>>>
>>> root:0:test
>>> nobody:99:nobody
>>> aster$:1001:Computer
>>> toast$:1002:TOAST$
>>> fordprefect:1003:Test Account
>>>
>>>Shouldn't there be an Administrator account and no root? I don't want my
>>>Linux root account even remotely confused or associated with a
>>>Samba/LDAP account. Any ideas?
>>
>> It depends on how you configured your LDAP.
>>
>> After Samba 3.0.14 you can have a normal user account with
>> Domain Administrator powers, which includes adding machines to the
>> domain and other privileges, using 'net groupmap'.
>>
>> So you can an account as the LDAP administrator, another
>> account as your Samba Administrator and your regular root account.
>> It's up to you. ;)
>
> But don't you need a Samba account with UID=0 to assign privileges
> in the first place?
Not anymore. ;)
> Ryan
Kind regards,
- --
Felipe Augusto van de Wiel <felipe at paranacidade.org.br>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org
iD8DBQFFr6JSCj65ZxU4gPQRArN2AKCI4SVmFZjbomMAvfHzVH1zq7culgCghF/k
BtQWs/php/pRQUON387KNos=
=Z758
-----END PGP SIGNATURE-----
More information about the samba
mailing list