[Samba] Avoiding uid conflicts between rfc2307 user/groups and computers

Marco Gaiarin gaio at sv.lnf.it
Mon Jan 15 15:08:11 UTC 2018


Mandi! Rowland Penny via samba
  In chel di` si favelave...

> 'SYSTEM' is a windows account, there is no concept of the 'SYSTEM'
> account on Unix, this includes Samba.

Again, i'm speaking more about machine account than LocalSYSTEM
account...


> Please read this:
> https://wiki.samba.org/index.php/The_SYSTEM_Account

Seems me perfectly coherent with what i'm saying, on detail:

	https://wiki.samba.org/index.php/The_SYSTEM_Account#How_the_SYSTEM_Account_Is_Used_by_a_Windows_Service

works not only for the SysVOL share, but more generally; simply sysvol
is a DC share, and on DC automatic mappings (via xID) happen, so
machine account HAVE an UID...


Simply, all share accessed by LocalSYSTEM user works like that... but
on a DM with rfc2307 there's no automatic mappings, access using
DOMAIN\machine$ does not works and anonymous/guest access are tried as
fallback.

Right?

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)



More information about the samba mailing list