[Samba] builtin groups are not mapped by winbind

Rowland Penny rpenny at samba.org
Fri May 20 08:31:22 UTC 2022


On Fri, 2022-05-20 at 09:53 +0200, L. van Belle via samba wrote:
> Good morning people around the world.. 
> 
> @rowland, This script isnt running anymore, can you check/verify it. 
> https://raw.githubusercontent.com/thctlo/samba4/master/samba-check-SePrivile
> ges.sh 
> 
> Can you have a check in it also.  
> This smells like a bug.. 
> 
> All mentioned groups exists.. in the AD as Builtin\GroupNames and
> should how
> with above script. 
> 
> net rpc rights list privileges SeBackupPrivilege
> -UADDOM\\Administrator
> -S$(hostname -f)
> Enter ADDOM\Administrator's password:
> Could not connect to server server.internal.hostname.tld
> Connection failed: NT_STATUS_INVALID_TOKEN
> 
> If its all good. I get *( tested on a old old samba version 4.6.16.) 
> 
> SeBackupPrivilege:
>   BUILTIN\Administrators
> 
> So, I think there is more going on here.. 
> 

I see what you mean, it doesn't work for myself, I will get back to
you.

Rowland





More information about the samba mailing list