[Samba] LAM (ldap acc manager) with samba4

[Elias Pereira]

For the LAM work with Samba4 I need to have LDAP installed?

On Wed, Oct 15, 2014 at 10:31 AM, L.P.H. van Belle <belle at bazuin.nl> wrote:

> And, what i forgot to mention.
>
> If you have win 7 and win 8.(x)
> always use the highest windows to with rats.
> in case of setting up GPO and you dont want to miss some policies.
>
> Louis
>
> >-----Oorspronkelijk bericht-----
> >Van: belle at bazuin.nl [mailto:samba-bounces at lists.samba.org]
> >Namens L.P.H. van Belle
> >Verzonden: woensdag 15 oktober 2014 15:29
> >Aan: ???????????? ??????????????????
> >CC: samba at lists.samba.org
> >Onderwerp: Re: [Samba] LAM (ldap acc manager) with samba4
> >
> >For rats..
> >
> >The computer must be joined in the domain.
> >The user must have "Domain Admin" rights. ( or use
> >DOMAIN\Administrator )
> >and you need to set the privileges on the server for the group/user
> >This needs to be done on all DC and/or member servers
> >
> >I give "Domain Admins" all rights.
> >like this.
> >
> >SETNTPASSWD="YOURpassWord!"
> >
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeDiskOperatorPrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeTakeOwnershipPrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeBackupPrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeRestorePrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeRemoteShutdownPrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SePrintOperatorPrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeAddUsersPrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeDiskOperatorPrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeSecurityPrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeSystemtimePrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeShutdownPrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeDebugPrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeSystemEnvironmentPrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeSystemProfilePrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeProfileSingleProcessPrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeIncreaseBasePriorityPrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeLoadDriverPrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeCreatePagefilePrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeIncreaseQuotaPrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeChangeNotifyPrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeUndockPrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeManageVolumePrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeImpersonatePrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeCreateGlobalPrivilege -UAdministrator
> >echo ${SETNTPASSWD}| net rpc rights grant "${SETNTDOM}\Domain
> >Admins" SeEnableDelegationPrivilege -UAdministrator
> >
> >
> >Louis
> >
> >
> >>-----Oorspronkelijk bericht-----
> >>Van: cas at altlinux.ru [mailto:samba-bounces at lists.samba.org]
> >>Namens ???????????? ??????????????????
> >>Verzonden: woensdag 15 oktober 2014 15:18
> >>Aan: samba at lists.samba.org
> >>Onderwerp: Re: [Samba] LAM (ldap acc manager) with samba4
> >>
> >>15.10.2014 17:11, Elias Pereira ??????????:
> >>> Hello Mourik,
> >>>
> >>> I've tried various settings for the LAM administer the
> >>Samba4, but without
> >>> success. With the RSAT can administer normally. But I would like to
> >>> configure the LAM.
> >>How do you use RSAT? I fail to connect to Samba AD DC from installed
> >>RSAT on Windows (logged as Administrator). Unable to management remote
> >>host. Are there any tricks for this process?
> >>
> >>--
> >>Andrey Cherepanov
> >>ALT Linux
> >>cas at altlinux.ru
> >>--
> >>To unsubscribe from this list go to the following URL and read the
> >>instructions:  https://lists.samba.org/mailman/options/samba
> >>
> >
> >--
> >To unsubscribe from this list go to the following URL and read the
> >instructions:  https://lists.samba.org/mailman/options/samba
> >
> >
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>



-- 
Elias Pereira