samba - Jan 2025 - samba-tool as non-root

Hi

I need to run external scripts to manipulate with user/group setting in
DC (adding groups and managing members in groups) and I would prefer do
it under non-root account.

Is there a recommended way to run samba-tool without a root account?

After default installation there is many files in /var/lib/samba
directory with root:root 600 or 644 permissions. 

I suppose I could change them to different group and add group
permissions to +rw, but I'm currious if there is any recommended way to
solve this. 

Pavel

On Mon, 20 Jan 2025 20:56:52 +0100
PaLi via samba <samba at lists.samba.org> wrote:
> Hi
> 
> I need to run external scripts to manipulate with user/group setting
> in DC (adding groups and managing members in groups) and I would
> prefer do it under non-root account.
> 
> Is there a recommended way to run samba-tool without a root account?
> 
> After default installation there is many files in /var/lib/samba
> directory with root:root 600 or 644 permissions. 
> 
> I suppose I could change them to different group and add group
> permissions to +rw, but I'm currious if there is any recommended way
> to solve this. 
> 
> Pavel
> 
> 
Yes, do not do it, you will break Samba.

You do not have to use 'root', you can run samba-tool with sudo and a
member of Domain Admins.

Rowland