Buchan Milne
2003-Nov-25 17:05 UTC
[Samba] Should User Manager for Domains work as non-root Domain Admin?
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have a test network that I have been running samba3 on for a while (currently 3.0.1pre3) as a Domain Controller on LDAP backend, and I was under the impression that the User Manager for Domains (from the tools for NT4) should work as a non-root Domain Admin, but it doesn't. I seem to have a correct setup, members of my Domain Admin group can join machines to the domain, and have admin rights on domain members (ie can create local users etc). If I log in as root on a domain member, I can use User Manager for Domains to view and change the properties of users and groups. However, I can't as a non-root Domain Admin view the properties of a group or user in User Manager for Domains, or make any changes. If I double-click a user, I get a "permission denied"-type message. Now, I have in the past made logs of this, but I don't know if it's worthwhile debugging or posting a bug if it's not currently intended to work. Everything else (automatic machine account creation, group mapping etc etc) seems to work fine, so I don't see that it can be a configuration problem (unless I missed some documentation ..). Regards, Buchan P.S. I am subscribed in digest, so CC's will reach me faster. - -- |--------------Another happy Mandrake Club member--------------| Buchan Milne Mechanical Engineer, Network Manager Cellphone * Work +27 82 472 2231 * +27 21 8828820x202 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/w4v2rJK6UGDSBKcRAjgjAKCAsD+lgsJdC+ir0eMCj0O275eNdQCgrexr HFMTklcl6jyesGEWYZmxTEc=gVSO -----END PGP SIGNATURE-----