samba - Oct 2002 - NT Administrator account changes permissions when logging onto samba server

Hello, all

I have a problem with my administrator accounts on WinNT with Samba.

When I log in locally as the Administrator, it works as expected - I *am*
the administrator for the machine.

When I log into the domain as Administrator, it works as expected - I log in
as root.

The prolem comes when I try to do anything on the local machine as
Administrator (logged into the Samba server). The problem is that any NT
permissions that I've put onto the Administrator account are not there when
I'm logged in on the domain. When I go back to logging in locally,
permissions are all fine.

What I'm trying to do is to run Veritas' BackupExec on an NT server and
be
able to backup files on the linux box (main server). When I try to run the
front end I get a permissions error - that the account must be an
administrator or a backup operator.

I go into the Administrator account (local) and set the backup account to
Administrator *and* backup operator. Log back in. Locally, it's fine.

Log into the domain - those permissions are not set, so I cannot run the
backup program.

This issue seems to be the same for each account, so I'm guessing that I
missed something in the config. I looked, but couldn't figure it out.

Any help from anyone? :)

main server: Mandrake 9.0 running Samba 2.2.6pre2
backup server: WinNT 4.0 Server with SP 6

On Mon, Oct 28, 2002 at 03:46:53PM -0800, Michael J. Luevane
wrote:
> Hello, all
> 
> I have a problem with my administrator accounts on WinNT with Samba.
> 
> When I log in locally as the Administrator, it works as expected - I *am*
> the administrator for the machine.
> 
> When I log into the domain as Administrator, it works as expected - I log
in
> as root.
Is the windows domain user "root" in your local Administrator group?

-- 
Frank Matthie?                                    fm+samba@Microdata-pos.de

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> Message: 7
> From: "Michael J. Luevane" <mikel@quantecllc.com>
> To: "Samba@Lists. Samba. Org" <samba@lists.samba.org>
> Date: Mon, 28 Oct 2002 15:46:53 -0800
> Subject: [Samba] NT Administrator account changes permissions when
logging onto samba server
>
> Hello, all
>
> I have a problem with my administrator accounts on WinNT with Samba.
>
> When I log in locally as the Administrator, it works as expected - I *am*
> the administrator for the machine.
>
> When I log into the domain as Administrator, it works as expected - I
log in
> as root.
But do you have admin rights on the local machine? Ie, can you add users
etc.?

>
> The prolem comes when I try to do anything on the local machine as
> Administrator (logged into the Samba server). The problem is that any NT
> permissions that I've put onto the Administrator account are not there
when
> I'm logged in on the domain. When I go back to logging in locally,
> permissions are all fine.
You must apply permissions/rights/group memberships to the domain
account you are going to use, when logged in with an account with local
admin rights (local Administrator or Domain Admin).
>
> What I'm trying to do is to run Veritas' BackupExec on an NT server
and be
> able to backup files on the linux box (main server). When I try to run the
> front end I get a permissions error - that the account must be an
> administrator or a backup operator.
When ou are running it as which user?
>
> I go into the Administrator account (local) and set the backup account
Local backup account?
> to
> Administrator *and* backup operator. Log back in. Locally, it's fine.
>
> Log into the domain - those permissions are not set, so I cannot run the
> backup program.
>
> This issue seems to be the same for each account, so I'm guessing that
I
> missed something in the config. I looked, but couldn't figure it out.
>
> Any help from anyone? :)
>
Could you post your smb.conf (or mail it to me privately), and if you
are using something like 'username map = /etc/samba/smbusers', please
include the username map file (/etc/samba/smbusers).

I suspect that you haven't got root included in your 'domain admin
group'.

> main server: Mandrake 9.0 running Samba 2.2.6pre2
> backup server: WinNT 4.0 Server with SP 6

FYI, the way we work is to not use the Administrator account for domain
admin work, we use domain accounts listed in our 'domain admin group'.

Buchan

- --
|----------------Registered Linux User #182071-----------------|
Buchan Milne                Mechanical Engineer, Network Manager
Cellphone * Work            +27 82 472 2231 * +27 21 8828820x121
Stellenbosch Automotive Engineering         http://www.cae.co.za
GPG Key                   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE9vlQqrJK6UGDSBKcRAhb2AKCU+k3PtQ3GKcXAKhIY1vQvCYe3KgCcDyZW
px7bsXO9AHF0axKAygh0esg=HP68
-----END PGP SIGNATURE-----