samba - Sep 2009 - Question regarding access to shares from LOCAL administrator account

Hi.

How do I give access to shares from the LOCAL administrator account to a
share(s) on the samba server?
(workstation is domain member, without the need to specify a password).

-------------------------- smb.conf
  domain logons = Yes
  os level = 200
  domain master = Yes
  security = user
--------------------------

I have read chapters 12,13,15 but there seems to be no way I can put the
"local administrator" into /etc/group nor mapping it via "net
groupmap".
I can do it the other way around i.e. mapping a local group to a group
on the server, but for one share only I need to have access for the local
administrator to the share on the server.


Jobst




-- 
This message represents the official view of the voices in my head!

  | |0| |   Jobst Schmalenbach, jobst at barrett.com.au, General Manager
  | | |0|   Barrett Consulting Group P/L & The Meditation Room P/L
  |0|0|0|   +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia

On 3/09/2009 11:26 AM, Jobst Schmalenbach wrote:
> How do I give access to shares from the LOCAL administrator account to a
share(s) on the samba server?
> (workstation is domain member, without the need to specify a password).
>    
I don't believe this is possible. The local administrator does not 
necessarily have a fixed username or password and I don't think the 
domain controller can see the SIDs used on the client for local
users.
> I can do it the other way around i.e. mapping a local group to a group
> on the server, but for one share only I need to have access for the local
> administrator to the share on the server.
>    
Are you sure you can't do it the normal way? Create a domain user and 
add them to the local administrators group on each PC? They wouldn't 
have to be domain admins if you didn't want to.

*Michael Heydon - IT Administrator *
michaelh at jaswin.com.au <mailto:michaelh at jaswin.com.au>

"Jobst Schmalenbach" <jobst at barrett.com.au> wrote in message
news:20090903032607.GA4803 at senna.barrett.com.au...
>
> Hi.
>
> How do I give access to shares from the LOCAL administrator account to a
share(s) on the samba server?
> (workstation is domain member, without the need to specify a password).
>
> -------------------------- smb.conf
>   domain logons = Yes
>   os level = 200
>   domain master = Yes
>   security = user
> --------------------------
>
> I have read chapters 12,13,15 but there seems to be no way I can put the
> "local administrator" into /etc/group nor mapping it via
"net groupmap".
> I can do it the other way around i.e. mapping a local group to a group
> on the server, but for one share only I need to have access for the local
> administrator to the share on the server.
>
>
> Jobst
I hope I understand your question.  I think you want the local administrator
on a workstation to access a share on a server.

The local administrator account on a workstation exists only on that
workstation.  It cannot access shares on another machine.

This is so with Samba and Windows.

I would do the following:

Create a domain user account

Add it to the local administrator's group on the workstation

Grant it access to the share on the Samba server