Where did samba store information regarding user privilege? It seems stored locally to server where the "net rpc rights grant" command runs on. Do I need to runs same commands to all domain controllers? --beast
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 beast wrote:> > Where did samba store information regarding user privilege?account_policy.tdb> Do I need to runs same commands to all domain controllers?For now, yes. jerry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFE8HuGIR7qMdg1EfYRAufCAKCfEh+kz5HRF8dr1TLXi+VVnS8Q0QCgwlPt VjkghonqwyGjHmMdqz4Uvv8=vsDD -----END PGP SIGNATURE-----
Gerald (Jerry) Carter wrote:> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > beast wrote: > >> Where did samba store information regarding user privilege? >> > > account_policy.tdb > > >> Do I need to runs same commands to all domain controllers? >> > > For now, yes. >Hi Jerry, Since account policy is unique to every user, why there is an account_policy.tdb file, why not just added to to ldap just like sambaLogonHours? --beast
beast escreveu:> Gerald (Jerry) Carter wrote: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> beast wrote: >> >>> Where did samba store information regarding user privilege? >>> >> >> account_policy.tdb >> >> >>> Do I need to runs same commands to all domain controllers? >>> >> >> For now, yes. >> > > Hi Jerry, > > Since account policy is unique to every user, why there is an > account_policy.tdb file, why not just added to to ldap just like > sambaLogonHours? > > > --beast >Hi. I use samba 3.0.14a yet, but if I remeber right, policy settings can be exported to ldap since 3.0.21. root #> pdbedit -y -i tdbsam -e ldapsam About privileges, that the first message was talking about I dont know the current ldap status. Regards. Edmundo Valle Neto