I am attempting to use the smb.conf root={user} directive to allow domain
admins to have root access on samba shares. This is primarily so that we
can use NT tools to manipulate ownership and ACLs. It appears only root
can change ownership in Linux, so we need to be root.
However, I have been unable to get this directive to have any effect. I
have tried
root = "@domain\domain admins"
root = domain\domainadminusername
Neither seems to have any effect. Should the smbd process be owned as
root if this is working correctly? It is not, nor do I appear to have root
access when connecting as a domain admin.
I have also noticed that many (not all) of my smbd processes appear to
be running as root, and have checked a few to investigate, and found they
are regular domain users. Is this normal?
Example: The 10xxx ids are domain users
root 523 0.0 0.2 3564 1180 ? S Mar28 0:05 smbd -D
10109 697 0.1 0.9 6824 4740 ? S Mar28 27:43 smbd -D
root 17282 0.0 0.4 4800 2244 ? S Apr12 0:00 smbd -D
root 25189 0.0 0.4 4552 2272 ? S Apr14 0:13 smbd -D
10593 25379 0.0 0.4 4572 2272 ? S Apr14 1:09 smbd -D
10144 25958 0.3 0.4 4540 2264 ? S 05:34 1:45 smbd -D
root 25964 0.0 0.4 4540 2204 ? S 06:36 0:01 smbd -D
10521 25980 0.0 0.4 4540 2288 ? S 07:05 0:03 smbd -D
10279 25982 0.0 0.4 4540 2288 ? S 07:10 0:02 smbd -D
root 25984 0.0 0.4 4540 2204 ? S 07:10 0:00 smbd -D
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Shawn Wright, Systems Manager
Shawnigan Lake School
http://www.sls.bc.ca
swright@sls.bc.ca