[Samba] SAMBA+LDAP-How to promote Administrator with all priviliges?

Daniel L. Miller dmiller at amfes.com
Thu Oct 11 23:29:05 GMT 2007


Torsten wrote:
> Frank Van Damme schrieb:
>> On 10/11/07, Torsten <heinzelrumpel at gmx.de> wrote:
>>  
>>> Frank Van Damme schrieb:
>>>    
>>>> You problem is that the account does not have uid number 0. If it has,
>>>> it has a root account on your unix box and you're all set.  
>>> o.k, but uid 0 is reserved for root, isn't it? and it should be 
>>> possible
>>> to have more than one account with administrative priviliges.
>>>     
>>
>> Yes, uid 0 is for root, but you can easily have a user in ldap with
>> uid 0 and one in /etc/passwd or similar. Try it.
>>   
> o.k. I believe you (;-), but still, wthat if I want to promote my 
> assistent and my housekeeper with administrative piviliges? I cant 
> give them all uid0.
Samba administrator is totally different from Linux root.  While 
typically the Linux root user is also shown as a Samba administrator - 
this is not necessary and in fact can be a security consideration.  
Unless your configuration requires Samba users to also be Linux users, 
your Samba users - and administrators - have nothing to do with Linux 
privileges.
-- 
Daniel


More information about the samba mailing list