[Samba] net rpc rights grant: NT_STATUS_ACCESS_DENIED

[Gerald Carter]

Hey Ryan,

> The samba host is a domain member server (security=ADS) 
> with winbind for user accounts.   Where is this user rights
> database stored and what is the tool to assign admin privileges?

Use 'net sam' to add the user in question to the BUILTIN\Administrators
group on your Samba host.  The user rights assignments are stored
in account_pol.tdb IIRC (but that may have changed).  It's been
several years since I look at that code and I remember Michael Adam
making some interface changes.  But I think the storage location on
smbpasswd and tdbsam installations is the same.

> # /usr/local/samba/bin/wbinfo -i testpc1
> testpc1:*:10726:10005:testpc1 papercut
> test:/home/REALM/testpc1:/usr/bin/tcsh
> 
> # groups testpc1
> testpc1 : root
> 
> # /usr/local/samba/bin/net rpc rights grant testpc1
> SePrintOperatorPrivilege -U testpc1
> Failed to grant privileges for testpc1 (NT_STATUS_ACCESS_DENIED)





cheers, jerry
-- 
=====================================================================
http://www.plainjoe.org/
"What man is a man who does not make the world better?"      --Balian

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 252 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba/attachments/20090908/0c146634/attachment.pgp>