[Samba] samba_upgradedns returned an error "Unable to find uid/gid for Domain Admins "

Rowland penny rpenny at samba.org
Tue Feb 2 20:09:29 UTC 2016


On 02/02/16 19:42, Denis Cardon wrote:
>
>
> To be picky on the terms, I'd say that the Windows equivalent of the 
> root user would be "Local System". Administrator account is some kind 
> of a super sudoers on modern version of Windows (cf. UAC and al.), and 
> still there are many things that you cannot do unless going with 
> "Local System".

You are probably correct in what you are saying when it comes to 
windows, but we are talking Unix here and a Samba DC maps 
'Administrator' to the Unix 'root' user
>
> And concerning domain member user mapping, some security ayatollah 
> might even say that you should not use "domain admins" accounts for 
> anything else than AD maintenance, and urge you to use less privileged 
> account with some extra local privileges to do domain members 
> maintenance.

But then a windows domain member != Samba Unix domain member.

Rowland




More information about the samba mailing list