[Samba] Little strangeness on dns-* account...

Marco Gaiarin gaio at sv.lnf.it
Wed Dec 19 08:26:07 UTC 2018


Mandi! Andrew Bartlett via samba
  In chel di` si favelave...

> > > 	isCriticalSystemObject: TRUE
> > Not sure where that came from, both my dns-* users do not have that
> > line
> We probably should add it however.  ;-)

Can i safely add this?


> > No, it wouldn't be good idea to disable them, not if you want
> > BIND9_DLZ to work.
[...]
> For the list, this account is part of a small attempt to provide some
> measure of privilege separation between BIND9 and the rest of Samba's
> AD DC.  

Ok, thanks andrew and rowland, i supposed that.


PS: it is worth to fire up a bugreport?

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)



More information about the samba mailing list