[Samba] Unable to set SeDiskOperatorPrivilege

Henry McLaughlin henry at incred.com.au
Fri Jan 15 12:12:05 UTC 2016


On 15 January 2016 at 23:08, Henry McLaughlin <henry at incred.solutions>
wrote:

>
>
> On 15 January 2016 at 22:28, Rowland penny <rpenny at samba.org> wrote:
>
>> On 15/01/16 11:12, Henry McLaughlin wrote:
>>
>>>
>>>     Have you by any chance given Administrator a uidNumber ?
>>>
>>>
>>> Yes, 10000
>>>
>>> Was that wrong?
>>>
>>>
>>>
>>>
>> Well, in my opinion, yes. By giving Administrator a uidNumber, you have,
>> as far as Unix is concerned, turned it into a normal user that doesn't have
>> the rights to do anything.
>>
>> Is this on a DC ? if so, remove the uidNumber and it should start working
>> again, if it is a domain member, again remove the uidNumber and add this
>> line to smb.conf
>>
>> username map = /etc/samba/samba_usermapping
>>
>> Create the file '/etc/samba/samba_usermapping' with this content:
>>
>> !root = SAMDOM\Administrator SAMDOM\administrator
>>
>> Replace 'SAMDOM' with your workgroup
>>
>> This will map 'Administrator' to the Unix 'root' user
>>
>> Rowland
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
>
> Thanks Rowland this worked however I am totally confused as to when a
> Windows User/Groups needs to be given a UNIX id in ADUG. Is there a
> reference out the I can read, study & understand?
>


More information about the samba mailing list