[Samba] Avoiding uid conflicts between rfc2307 user/groups and computers

Marco Gaiarin gaio at sv.lnf.it
Mon Jan 15 09:51:54 UTC 2018


Mandi! Rowland Penny via samba
  In chel di` si favelave...

> I am not disputing what you say, I am just asking for concrete proof
> that a computer account MUST have a uidNumber account.

Rowland, it is not (only) a matter of authentication, it is a matter of
'act' with machine account.


I've digged a bit but found nothing than (i use WPKG as deployment
system, it is only an example):

	https://wpkg.org/System_User
	https://wpkg.org/SYSTEM_user_Command_Prompt

probably was some old thread in mailing list; anyway, SYSTEM user can
act (eg, access shares) with the machine account credentials; AFAIK
accessing as SYSTEM to a share will trigger an access with machine
account, and as fallback as anonymous/Everyone.


So, if you mean that machine account can auth without UID, it is right;
if they need access (non anonymous) to some share, i suppose a UID is
needed.


I hope i was clear.

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)



More information about the samba mailing list