[Samba] Root user shows up as "administrator"

Rowland penny rpenny at samba.org
Tue Feb 16 13:32:04 UTC 2021


On 16/02/2021 12:52, Björn JACKE via samba wrote:
> On 2021-02-16 at 09:39 +1300 Andrew Bartlett via samba sent off:
>> The default idmap.ldb entries give UID 0 (root) to the administrator
>> user to ensure it can change all files.
>>
>> I know some other developers disagree about the wisdom of this, but for
>> now that is what the code does.
> yes, there are many people who thing that Adminstrator should not have
> uidNUmber 0 assigned, me too. It can cause issues at several places. What
> Andrew refers to is discussed in
> https://bugzilla.samba.org/show_bug.cgi?id=9837
>
> Björn
>

And there are even more that think that making the Windows 'super' user 
into a standard Unix user is a bad idea and could lead to even more 
security problems. If you are having problems with Administrator being 
mapped to the Unix user root, then you are doing something wrong.

I keep looking at your bug report and thinking that I should just close 
it as being 'invalid', but I just ignore it in the end.

It has been common practice to map Administrator to root for years, even 
before the advent of Samba AD and I haven't seen any mention of a 
related security problem.

Rowland





More information about the samba mailing list