Fabio Muzzi a �crit :

Hello St�phane,

Saturday, June 4, 2005, 2:02:28 PM, you wrote:




SP> For joining a machine to domain, you must have a user with uid = 0.
SP> But, begin with samba 3.0.11, the privileges can be used for use a other
SP> user than root (uid = 0)
SP> You can read more information in this pages : SP> http://us2.samba.org/samba/docs/man/Samba-HOWTO-Collection/rights.html

Yes, i have read this even if i have not yet tried it.

What I have not understood is why do I *need* an user with a SID ending in
500  (as  the  howto  says),  because  I  have never had one, and I had no
problems  at  all. The howto says I need one, but id does not say why, and
what happens id I don't have one.

I suppose can be cause problem in AD mode or with some communication with windows server.


SP> The "root" user is only used for that, but after joining a domain,
SP> changing the SID cause no problem.

You  say that I can change the SID of a domain user and the clients will not get
confused by this change?

sorry, I changed the SID to 500 for my administrator account, not for "root" user.
I cannot says if changing root account can make some problem.

SP> Actually, on my network I not enabled privileges (in my test network :
SP> yes  and  that  work). But, I use root user only for adding machine to
SP> domain,  for  the  rest of administration, I have a administrator user
SP> with  SID  =  S-1-5-21-xxxxxx-xxxx-xxxx-500  and  groupSID           =
SP> S-1-5-21-xxxxxx-xxxxx-xxxxx-512


Well, this seems to be a good idea anyway.




--
St�phane Purnelle <[EMAIL PROTECTED]>
Site Web : http://www.linuxplusvalue.be

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to