-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Paul Griffith wrote:
| Greetings,
|
| We have home grown user management backend system,
| and I have ported our v2.2.x passdb over to v3 type plugin.
| I am able to access files and print using our backend.
| I am running into trouble joining PCs to the domain.
|
| I am assuming the primary problem is that our
| backend system doesn't have a 'root' user.
|
| I was hoping that assigning SeMachineAccountPrivilege
| to our tech members would be enough to allow our tech
| members to join computers to our domain.
|
...
|
| So the question is it possible to gant rights
| without using the Samba root user? Any other suggestions?

Paul,

Create a group mapping for the Domain Admins group.  E.g.

net groupmap modify ntgroup="Domain Admins" unixgroup="ntadmins"

now any member of the ntadmins unix group will be able
to assign privileges.




cheers, jerry ===================================================================== Alleviating the pain of Windows(tm) ------- http://www.samba.org GnuPG Key ----- http://www.plainjoe.org/gpg_public.asc "I never saved anything for the swim back." Ethan Hawk in Gattaca -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCCQ4vIR7qMdg1EfYRAm8oAKDfwwWrK5p8L8C2PHQ8S4rNrxsPUACeIP4i
i/vp0Z6J79ht3KWbK8DwglU=
=QayZ
-----END PGP SIGNATURE-----
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to