I have a samba 3.0.23a server that is a member of a Windows 2003 Active Directory domain. I can use the Services MMC to see the services specified in the svcctl list option in smb.conf but trying to stop/start any services gives me an "Access Denied". I have tried this as a normal user as well as the domain Administrator account. I'm sure it's something I'm missing, but I can't for the life of me figure it out. Ideas? Also, once this is figured out, is there a way to give permissions to certain users to stop and start some services but not others (for example, developers may want to restart JBoss, but I don't necessarily want them messing with MySQL on the same box). Thanks, --Dennis
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dennis B. Hopp wrote:> I have a samba 3.0.23a server that is a member of a Windows 2003 Active > Directory domain. I can use the Services MMC to see the services specified in > the svcctl list option in smb.conf but trying to stop/start any services gives > me an "Access Denied".You have to be a member of the local Administrators group on the Samba box (or root). Make sure you have winbindd running and that 'net sam listmem Administrators' should the domain admins group included in the local Administrators group.> Also, once this is figured out, is there a way to give > permissions to certain users to stop and start some > services but not others (for example, developers may > want to restart JBoss, but I don't necessarily want > them messing with MySQL on the same box).You can set the security descriptor using the sc.exe command from a Windows client. See the sdset and sdshoow tool options. cheers, jerry ====================================================================Samba ------- http://www.samba.org Centeris ----------- http://www.centeris.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFgCmGIR7qMdg1EfYRAhgMAJ9t6FAcd8iSMHgzPnyHPDhfwpvCxQCgvSGz WFhKbEaWBoMbPxxwzNX6QYE=y5Il -----END PGP SIGNATURE-----