Re: [Samba] Domain Admins with Samba 3.024
On 14-Feb-07, at 8:13 AM, Neil Jolly wrote: Please read the changelog ! There are many change between 3.0.10 and 3.0.2x In 3.0.2x samba version, privilege are enabled are must be used ! Replying to my own message here to explain, for the sake of others, how I resolved this issue. 1) Backed up /etc/samba 2) Completely removed all the saba rpms. 3) Downloaded the samba src rpm 4) Downloaded any packages needed to satisfy dependancies (postgresql in my case) 5) Built new rpms 6) installed all the previously built rpms with the exception of samba3-vscan, and samba3-winbind (these weren't required in my case) 7) restored /etc/samba 8) I had to rejoin the domain with the test clients after this (not sure why I had to do this) as the previous machine accounts were no longer valid. Since I was still configuring the server, and in the testing stage this was no big deal for me, but for a larger network it may be worth finding a way around this one. No other changes were made, and domain admins are now recognized as administrators on the local client PCs. Thanks for all the replies. I hope this is helpful to someone. Neil Jolly #12 800 Bowcroft Place Cochrane, Alberta Phone: (403) 688-7516 Fax: (403) 851-0873 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Domain Admins with Samba 3.024
I am having the exact same problem as you. When you say "I built fresh rpms", do you mean that you downloaded the srpms and used the rpmbuild command? Could you post what you did in a step by step format. Thanks, Gary On Wed, 2007-02-14 at 21:48 -0700, Neil Jolly wrote: > On 14-Feb-07, at 8:13 AM, Neil Jolly wrote: > > > > > > >> Please read the changelog ! > >> > >> There are many change between 3.0.10 and 3.0.2x > >> In 3.0.2x samba version, privilege are enabled are must be used ! > >> > > I resolved the issue. I built fresh rpms, completely uninstalled the > old install of samba, installed the fresh rpms, and restored the > configuration files. Worked like a charm this time round. Not sure > what the issue whas, but I'm glad to have it resolved. > > Thanks for the help, and suggestions. > > Neil Jolly > #12 800 Bowcroft Place > Cochrane, Alberta > Phone: (403) 688-7516 > Fax: (403) 851-0873 > > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Domain Admins with Samba 3.024
On 14-Feb-07, at 8:13 AM, Neil Jolly wrote: Please read the changelog ! There are many change between 3.0.10 and 3.0.2x In 3.0.2x samba version, privilege are enabled are must be used ! I resolved the issue. I built fresh rpms, completely uninstalled the old install of samba, installed the fresh rpms, and restored the configuration files. Worked like a charm this time round. Not sure what the issue whas, but I'm glad to have it resolved. Thanks for the help, and suggestions. Neil Jolly #12 800 Bowcroft Place Cochrane, Alberta Phone: (403) 688-7516 Fax: (403) 851-0873 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Domain Admins with Samba 3.024
> Please read the changelog ! > > There are many change between 3.0.10 and 3.0.2x > In 3.0.2x samba version, privilege are enabled are must be used ! > Like this: net rpc rights list accounts -U root%"123&urin" BUILTIN\Print Operators No privileges assigned BUILTIN\Account Operators No privileges assigned RLRMR\Domain Admins SeMachineAccountPrivilege SeTakeOwnershipPrivilege SeBackupPrivilege SeRestorePrivilege SeRemoteShutdownPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege BUILTIN\Backup Operators No privileges assigned BUILTIN\Server Operators No privileges assigned BUILTIN\Administrators SeMachineAccountPrivilege SeTakeOwnershipPrivilege SeBackupPrivilege SeRestorePrivilege SeRemoteShutdownPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege Everyone No privileges assigned Doesn't work. -- Neil Jolly Jolly Computatations #12 800 Bowcroft Place Cochrane, Alberta Phone: (403) 688-7516 Fax: (403) 851-0873 Web: www.jollycom.ca -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Domain Admins with Samba 3.024
Please read the changelog ! There are many change between 3.0.10 and 3.0.2x In 3.0.2x samba version, privilege are enabled are must be used ! --- Stéphane PURNELLE [EMAIL PROTECTED] Service Informatique Corman S.A. Tel : 00 32 087/342467 Neil Jolly <[EMAIL PROTECTED]> Envoyé par : [EMAIL PROTECTED] 14/02/2007 15:11 A samba@lists.samba.org cc Objet Re: [Samba] Domain Admins with Samba 3.024 On 14-Feb-07, at 4:01 AM, Gareth Cummings wrote: > I am having the same problem on 3.23d, had it working fine with on > 3.0.10. > > The users in the domain admin group can add machines to the network > but do not have admin rights on the actual PCs' Thanks for confirming this problem. Good to know I'm not alone, but I still need to resolve the issue at some point. This server's not in production as yet, so I'm free to try some changes if anyone has a suggestion. Thanks, Neil Jolly #12 800 Bowcroft Place Cochrane, Alberta Phone: (403) 688-7516 Fax: (403) 851-0873 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Domain Admins with Samba 3.024
On 14-Feb-07, at 4:01 AM, Gareth Cummings wrote: I am having the same problem on 3.23d, had it working fine with on 3.0.10. The users in the domain admin group can add machines to the network but do not have admin rights on the actual PCs' Thanks for confirming this problem. Good to know I'm not alone, but I still need to resolve the issue at some point. This server's not in production as yet, so I'm free to try some changes if anyone has a suggestion. Thanks, Neil Jolly #12 800 Bowcroft Place Cochrane, Alberta Phone: (403) 688-7516 Fax: (403) 851-0873 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Domain Admins with Samba 3.024
I am having the same problem on 3.23d, had it working fine with on 3.0.10. The users in the domain admin group can add machines to the network but do not have admin rights on the actual PCs' Neil Jolly wrote: I can't seem to get the Domain Admins group members to be recognisd as administrators on domain member PCs.Running net groupmap list yeilds the following: Domain Admins (S-1-5-21-1288424760-4211430746-2168377316-512) -> admin --irrelevant groups omitted-- Running net rpc group members "Domain Admins" yeilds: RLRMR\administrator RLRMR\root Looging in as administrator on a network connected domain member I get only normal restricted user priviledges. What am I missing here folks? Thanks, -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Domain Admins with Samba 3.024
I can't seem to get the Domain Admins group members to be recognisd as administrators on domain member PCs.Running net groupmap list yeilds the following: Domain Admins (S-1-5-21-1288424760-4211430746-2168377316-512) -> admin --irrelevant groups omitted-- Running net rpc group members "Domain Admins" yeilds: RLRMR\administrator RLRMR\root Looging in as administrator on a network connected domain member I get only normal restricted user priviledges. What am I missing here folks? Thanks, -- Neil Jolly Jolly Computatations #12 800 Bowcroft Place Cochrane, Alberta Phone: (403) 688-7516 Fax: (403) 851-0873 Web: www.jollycom.ca -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
