Hallo, samba, when I connect a Windows client to a Samba domain I am asked for the user's login name and password on the Linux server who has the rights to do this job. Under Samba 3.0.22 and older I could use "root" with a password defined via "smbpasswd" (must not be the Linux password). Under Samba 3.0.28 and newer this way seems no more possible; I have to use another user from the "admin users = xxx, yyy, zzz" line. Is that a change which is somewhere documented? Please excuse my gerlish. Viele Gruesse! Helmut
Volker Lendecke
2008-Oct-01 13:24 UTC
[Samba] can "root" still connect clients to a domain?
On Tue, Sep 30, 2008 at 01:37:00PM +0200, Helmut Hullen wrote:> when I connect a Windows client to a Samba domain I am asked for the > user's login name and password on the Linux server who has the rights to > do this job. > > Under Samba 3.0.22 and older I could use "root" with a password defined > via "smbpasswd" (must not be the Linux password). Under Samba 3.0.28 and > newer this way seems no more possible; I have to use another user from > the "admin users = xxx, yyy, zzz" line. > > Is that a change which is somewhere documented?Probably this has to do with group mapping changes. The login as root should definitely still work, however root is no longer automatically in the domain admins group (probably required for accessing the client's c$ share). You have to create an explicit group mapping entry for the sid S-1-5-21-<DOMAIN-SID>-512 and make root member of the corresponding unix group. Volker -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.samba.org/archive/samba/attachments/20081001/173cb665/attachment.bin