unable to grant print operator privileges + workaround
Rowland Penny
repenny241155 at gmail.com
Tue Dec 23 13:27:54 MST 2014
On 23/12/14 19:24, David Mansfield wrote:
> Hi All,
>
> I was trying to follow the wiki
> https://wiki.samba.org/index.php/Samba_as_a_print_server#Granting_print_operator_privileges
> and the command there didn't (doesn't?) work. My system is set up
> with security = ads, but neither -Uadministrator nor
> -U'DOMAIN\administrator' worked. (NT_STATUS_LOGON_FAILURE).
>
> The workaround which I eventually found, and which I suggest be
> documented in said wiki page, was to set a local password for "root"
> user with smbpasswd -a root, then temporarily switch to "security =
> user", restart samba, grant the privs., then switch back to "security
> = ads".
>
> I'm not sure why the password is not accepted. When I use my own
> creds. (instead of -Uadministrator, I use -Ume) it accepts the
> credentials but the error message changes to NT_STATUS_ACCESS_DENIED.
>
> At least the archives will have this solution and hopefully it'll be
> easier to find for the next guy/gal.
>
> Additional information:
>
> System is centos 7, samba installed from distro packages (4.1.1-37).
> Kerberos is set up and working (smbclient -k works). UNIX
> authentication and nss is via sssd which is set up and working.
>
> My DC are all samba 4.1.12 compiled from source.
>
>
>
Hi, I think that something is wrong with your setup (selinux??) as the
command works for me on a member server.
Rowland
More information about the samba-technical
mailing list