[Samba] samba-tool as non-root
Rowland Penny
rpenny at samba.org
Mon Jan 20 20:10:22 UTC 2025
On Mon, 20 Jan 2025 20:56:52 +0100
PaLi via samba <samba at lists.samba.org> wrote:
> Hi
>
> I need to run external scripts to manipulate with user/group setting
> in DC (adding groups and managing members in groups) and I would
> prefer do it under non-root account.
>
> Is there a recommended way to run samba-tool without a root account?
>
> After default installation there is many files in /var/lib/samba
> directory with root:root 600 or 644 permissions.
>
> I suppose I could change them to different group and add group
> permissions to +rw, but I'm currious if there is any recommended way
> to solve this.
>
> Pavel
>
>
Yes, do not do it, you will break Samba.
You do not have to use 'root', you can run samba-tool with sudo and a
member of Domain Admins.
Rowland
More information about the samba
mailing list