Just ran across this and so am curious...
Server : Sun Sparc 10
OS : Solaris 2.5.1
Samba : 1.9.18alpha11
Client : NT 4.0 Wks w/SP3 ( vanilla install )
According to NTDOMAIN.txt...
The domain box should have two entries: the hostname and the SAMBA
domain.
Any local accounts are under the hostname domain, from which you will be
able to shut down the machine etc. At present, we do not specify that
the NT user logging in is a member of any groups, so will have no
priveleges, including the ability to shut down the machine [lkcl02nov97
-
done, as of samba-1.9.18alpha3! see "domain admin/guest users" and
"domain groups" parameters].
A dump from testparm confirms that there should be no domain admins....
domain groups =
domain controller =
domain admin users =
domain guest users =
However I was able to shutdown the workstation using the following line
from a Perl script...
Win32::InitiateSystemShutdown( "MYPC", "Perl shutdown", 30,
1, 1 );
I was logged in as a normal user ( there was no local account either )
with a normal smbpasswd entry.
The way I read the docs, this should not be possible. Am I correct?
j-
________________________________________________________________________
Gerald ( Jerry ) Carter
Engineering Network Services Auburn University
jerry@eng.auburn.edu http://www.eng.auburn.edu/users/cartegw
"...a hundred billion castaways looking for a home."
- Sting "Message in a Bottle" ( 1979
)
________________________________________________________________________
On Wed, 5 Nov 1997, Gerald W. Carter wrote:> Just ran across this and so am curious... > > Server : Sun Sparc 10 > OS : Solaris 2.5.1 > Samba : 1.9.18alpha11 > > Client : NT 4.0 Wks w/SP3 ( vanilla install ) > > According to NTDOMAIN.txt... > > The domain box should have two entries: the hostname and the SAMBA > domain. > Any local accounts are under the hostname domain, from which you will be > able to shut down the machine etc. At present, we do not specify that > the NT user logging in is a member of any groups, so will have no > priveleges, including the ability to shut down the machine [lkcl02nov97 > - > done, as of samba-1.9.18alpha3! see "domain admin/guest users" and > "domain groups" parameters]. > > > A dump from testparm confirms that there should be no domain admins.... > > domain groups = > domain controller = > domain admin users = > domain guest users = > > However I was able to shutdown the workstation using the following line > from a Perl script... > > Win32::InitiateSystemShutdown( "MYPC", "Perl shutdown", 30, 1, 1 ); > > I was logged in as a normal user ( there was no local account either ) > with a normal smbpasswd entry. > > The way I read the docs, this should not be possible. Am I correct?you are correct: the docs are wrong. "domain guest users" do not have permission to shut down the machine. ordinary and admin users do. lukes