RE: [Samba] Acces denied with usrmgr.exe
Hi No solution for that question ? Henri -Message d'origine- De : HB [mailto:ciradhb.forw...@laposte.net] Envoyé : jeudi 26 février 2009 11:59 À : 'samba@lists.samba.org' Objet : RE: [Samba] Acces denied with usrmgr.exe Hi all, I have migrated to 3.3.0 and it works as expected. I can now use usrmgr.exe why any account of the Domain Admins group. Thanks for your help. I have another question related to this (I use passdb backend = tdbsam) . When I create a new user with smbpasswd -a foo on the Linux box , the account created is initialized with the following values (pdbedit -v foo) : - Home directory : (\\myserver\foo) - Home Drive : H: - Logon Script : logonUNKNOWN.cmd When I open the user foo in usrmgr.exe - profile, the fields are ok, great. Now, if I create a user with usrmgr.exe from a windows box, all the fields are left to blank, and I have to complete the profile manually. Is there a way to have the account initialized exactly like it were created with smbpasswd, some kind of a profile skeleton ? Thanks in advance. Henri -Message d'origine- De : samba-bounces+ciradhb.forward=laposte@lists.samba.org [mailto:samba-bounces+ciradhb.forward=laposte@lists.samba. org] De la part de HB Envoyé : mardi 17 février 2009 09:29 À : samba@lists.samba.org Objet : RE: [Samba] Acces denied with usrmgr.exe -Message d'origine- De : jmcdo...@gmail.com [mailto:jmcdo...@gmail.com] De la part de Jim McDonough Envoyé : lundi 16 février 2009 21:38 À : HB Cc : samba@lists.samba.org Objet : Re: [Samba] Acces denied with usrmgr.exe On Mon, Feb 16, 2009 at 8:53 AM, HB ciradhb.forw...@laposte.net wrote: [2009/02/16 17:18:40, 2] rpc_server/srv_samr_nt.c:access_check_samr_function(246) _samr__LookupRids: ACCESS DENIED (granted: 0x000d067a; required: 0x0100) * The only account that can fully use usrmgr.exe is the samba root account , everything works well under that account. Jeremy has fixed this in current code. It's just a matter of getting the latest packages for whatever your distro is. You're right. In 3.3.0 release notes I can read : * Fix usrmgr opening a user object as non-root. I guess I have to recompile and upgrade to 3.3.0 (I am in 3.2.7) . Thanks. Henri -- Jim McDonough Samba Team jmcd at samba dot org jmcd at themcdonoughs dot org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
RE: [Samba] Acces denied with usrmgr.exe
Hi all, I have migrated to 3.3.0 and it works as expected. I can now use usrmgr.exe why any account of the Domain Admins group. Thanks for your help. I have another question related to this (I use passdb backend = tdbsam) . When I create a new user with smbpasswd -a foo on the Linux box , the account created is initialized with the following values (pdbedit -v foo) : - Home directory : (\\myserver\foo) - Home Drive : H: - Logon Script : logonUNKNOWN.cmd When I open the user foo in usrmgr.exe - profile, the fields are ok, great. Now, if I create a user with usrmgr.exe from a windows box, all the fields are left to blank, and I have to complete the profile manually. Is there a way to have the account initialized exactly like it were created with smbpasswd, some kind of a profile skeleton ? Thanks in advance. Henri -Message d'origine- De : samba-bounces+ciradhb.forward=laposte@lists.samba.org [mailto:samba-bounces+ciradhb.forward=laposte@lists.samba. org] De la part de HB Envoyé : mardi 17 février 2009 09:29 À : samba@lists.samba.org Objet : RE: [Samba] Acces denied with usrmgr.exe -Message d'origine- De : jmcdo...@gmail.com [mailto:jmcdo...@gmail.com] De la part de Jim McDonough Envoyé : lundi 16 février 2009 21:38 À : HB Cc : samba@lists.samba.org Objet : Re: [Samba] Acces denied with usrmgr.exe On Mon, Feb 16, 2009 at 8:53 AM, HB ciradhb.forw...@laposte.net wrote: [2009/02/16 17:18:40, 2] rpc_server/srv_samr_nt.c:access_check_samr_function(246) _samr__LookupRids: ACCESS DENIED (granted: 0x000d067a; required: 0x0100) * The only account that can fully use usrmgr.exe is the samba root account , everything works well under that account. Jeremy has fixed this in current code. It's just a matter of getting the latest packages for whatever your distro is. You're right. In 3.3.0 release notes I can read : * Fix usrmgr opening a user object as non-root. I guess I have to recompile and upgrade to 3.3.0 (I am in 3.2.7) . Thanks. Henri -- Jim McDonough Samba Team jmcd at samba dot org jmcd at themcdonoughs dot org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Acces denied with usrmgr.exe
On Tue, Feb 17, 2009 at 12:28 AM, HB ciradhb.forw...@laposte.net wrote: You're right. In 3.3.0 release notes I can read : * Fix usrmgr opening a user object as non-root. I guess I have to recompile and upgrade to 3.3.0 (I am in 3.2.7) . It's also in 3.2.8. -- Jim McDonough Samba Team jmcd at samba dot org jmcd at themcdonoughs dot org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Acces denied with usrmgr.exe
Hi I am trying to use usrmgr.exe in order to manage users and groups on my samba server PDC (passdb backend = tdbsam ) . I have the following strange behavior of usrmgr.exe : * when I launch usrmgr.exe from a user account that is part of the Domain Admins group or that explicitly has the SeAddUsersPrivilege privilege, I can see the list of users and groups , and create a new user, BUT when I double click on a user or group, I get the error popup : Access Denied , the user properties cannot be edited or viewed at this time . The log level 2 trace is : [2009/02/16 17:18:40, 2] rpc_server/srv_samr_nt.c:access_check_samr_function(246) _samr__LookupRids: ACCESS DENIED (granted: 0x000d067a; required: 0x0100) * The only account that can fully use usrmgr.exe is the samba root account , everything works well under that account. I strongly suspect it is a bug on privilege checking , can someone confirm that ? Is there a workarround to make it work as expected ? Thanks in advance henri -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Acces denied with usrmgr.exe
net rpc rights list Domain\ Admins net rpc rights list Administrators should give the info you need On Mon, Feb 16, 2009 at 5:53 AM, HB ciradhb.forw...@laposte.net wrote: Hi I am trying to use usrmgr.exe in order to manage users and groups on my samba server PDC (passdb backend = tdbsam ) . I have the following strange behavior of usrmgr.exe : * when I launch usrmgr.exe from a user account that is part of the Domain Admins group or that explicitly has the SeAddUsersPrivilege privilege, I can see the list of users and groups , and create a new user, BUT when I double click on a user or group, I get the error popup : Access Denied , the user properties cannot be edited or viewed at this time . The log level 2 trace is : [2009/02/16 17:18:40, 2] rpc_server/srv_samr_nt.c:access_check_samr_function(246) _samr__LookupRids: ACCESS DENIED (granted: 0x000d067a; required: 0x0100) * The only account that can fully use usrmgr.exe is the samba root account , everything works well under that account. I strongly suspect it is a bug on privilege checking , can someone confirm that ? Is there a workarround to make it work as expected ? Thanks in advance henri -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Acces denied with usrmgr.exe
On Mon, Feb 16, 2009 at 8:53 AM, HB ciradhb.forw...@laposte.net wrote: [2009/02/16 17:18:40, 2] rpc_server/srv_samr_nt.c:access_check_samr_function(246) _samr__LookupRids: ACCESS DENIED (granted: 0x000d067a; required: 0x0100) * The only account that can fully use usrmgr.exe is the samba root account , everything works well under that account. Jeremy has fixed this in current code. It's just a matter of getting the latest packages for whatever your distro is. -- Jim McDonough Samba Team jmcd at samba dot org jmcd at themcdonoughs dot org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
RE: [Samba] Acces denied with usrmgr.exe
-Message d'origine- De : jmcdo...@gmail.com [mailto:jmcdo...@gmail.com] De la part de Jim McDonough Envoyé : lundi 16 février 2009 21:38 À : HB Cc : samba@lists.samba.org Objet : Re: [Samba] Acces denied with usrmgr.exe On Mon, Feb 16, 2009 at 8:53 AM, HB ciradhb.forw...@laposte.net wrote: [2009/02/16 17:18:40, 2] rpc_server/srv_samr_nt.c:access_check_samr_function(246) _samr__LookupRids: ACCESS DENIED (granted: 0x000d067a; required: 0x0100) * The only account that can fully use usrmgr.exe is the samba root account , everything works well under that account. Jeremy has fixed this in current code. It's just a matter of getting the latest packages for whatever your distro is. You're right. In 3.3.0 release notes I can read : * Fix usrmgr opening a user object as non-root. I guess I have to recompile and upgrade to 3.3.0 (I am in 3.2.7) . Thanks. Henri -- Jim McDonough Samba Team jmcd at samba dot org jmcd at themcdonoughs dot org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
