[Samba] samba-tool as non-root

Rowland Penny rpenny at samba.org
Mon Jan 20 20:10:22 UTC 2025


On Mon, 20 Jan 2025 20:56:52 +0100
PaLi via samba <samba at lists.samba.org> wrote:

> Hi
> 
> I need to run external scripts to manipulate with user/group setting
> in DC (adding groups and managing members in groups) and I would
> prefer do it under non-root account.
> 
> Is there a recommended way to run samba-tool without a root account?
> 
> After default installation there is many files in /var/lib/samba
> directory with root:root 600 or 644 permissions. 
> 
> I suppose I could change them to different group and add group
> permissions to +rw, but I'm currious if there is any recommended way
> to solve this. 
> 
> Pavel
> 
> 

Yes, do not do it, you will break Samba.

You do not have to use 'root', you can run samba-tool with sudo and a
member of Domain Admins.

Rowland



More information about the samba mailing list