samba - Feb 2005 - Using SeMachineAccountPrivilege returns NT_STATUS_NO_SUCH_PRIVILEGE

I am logged into a new test Linux server with my personal admin account. It is a
member of a Linux group which has been mapped to Domain Admins.

When I issue 'net rpc rights grant auserid SeMachineAccountPrivilege'
and enter the password for my personal admin account, I am returned that it
failed with NT_STATUS_NO_SUCH_PRIVILEGE. 'auserid' is
both a Linux account and has been added to smbpasswd.

This is running the 3.0.11 Debian packages from samba.org on Debian Sarge.

-- 
Michael Lueck
Lueck Data Systems

Remove the upper case letters NOSPAM to contact me directly.

On Sun, 2005-02-13 at 21:13 -0500, Michael Lueck wrote:
> I am logged into a new test Linux server with my personal admin account. It
is a member of a Linux group which has been mapped to Domain Admins.
> 
> When I issue 'net rpc rights grant auserid
SeMachineAccountPrivilege' and enter the password for my personal admin
account, I am returned that it failed with NT_STATUS_NO_SUCH_PRIVILEGE.
'auserid' is
> both a Linux account and has been added to smbpasswd.
> 
> This is running the 3.0.11 Debian packages from samba.org on Debian Sarge.
Shouldn't that be: SetMachineAccountPrivilege
vs.
SeMachineAccountPrivilege

I think that should help.
-- 
greg, greg@gregfolkert.net

The technology that is
Stronger, better, faster:  Linux
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20050213/f81a9bc5/attachment.bin

Michael Lueck wrote:
> When I issue 'net rpc rights grant auserid
SeMachineAccountPrivilege'
OK, trick seems to be DOMAIN\auserid vs expecting it to assume the local domain
name. No more error message.

However when I 'net rpc rights list DOMAIN\auserid' and enter my
password, no error is given and no rights are shown. hhhhmmmm????

-- 
Michael Lueck
Lueck Data Systems

Remove the upper case letters NOSPAM to contact me directly.