samba - Jan 2006 - enable privileges: samba 3.0.14a (fc4) pdc with ldap

tried to get the answer on irc #samba, but people must be having a busy 
weekend...

1.
when you do, "enable privileges = yes" and set some privileges on the 
pdc, are those privileges effective throughout the entire domain?

2.
and then does "enable privileges = yes" need to be set on each samba 
member server of a domain?

3.
would i need to grant the same privileges on every samba member server 
in the domain?

i should mention that i am using pdc with ldap backend.

-- 
My Website: http://messinet.com
My Online Gallery: 
http://messinet.com/modules.php?name=Web_Links&l_op=visit&lid=3

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Anthony Messina wrote:
> 1.
> when you do, "enable privileges = yes" and set some 
> privileges on the pdc, are those privileges effective
> throughout the entire domain?
Not currently.
> 2.
> and then does "enable privileges = yes" need to be set 
> on each samba member server of a domain?
Depends on what you need.  The SeMachineAccountPrivilege
doesn't really apply on member servers but the
SePrintOperatorPrivilege does.
> 3.
> would i need to grant the same privileges on every 
> samba member server in the domain?
See above comments.






cheers, jerry
====================================================================I live in a
Reply-to-All world                -----------------------
Samba                                    ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFD132SIR7qMdg1EfYRAgzVAJ9s7duhIJRYC+Wf9wbR9sqL4739mwCfQtp7
vPFNZLJwf7jukRxMWLAnbkg=ngTW
-----END PGP SIGNATURE-----