Displaying 4 results from an estimated 4 matches for "anissue".
Did you mean:
anisse
2019 Jun 03
2
samba file server - sediskoperatorprivilege not being honored
..."any member of Domain Admins group"? If
> it's the former, than there is no issue (I can change share ACL from
> windows client using Administrator without changing any of the
> permissions i.e. owner:group can stay as root:root), if it's the
> latter, than I have anissue, since none other user from Domain Admins
> can change any ACL, unless i change owner/group or add initial ACL to
> domain admins (or any other user/group i gave sediskoperatorprivilege)
I wouldn't use 'Domain Admins' if you are using the winbind 'ad' backend
on a Unix...
2019 May 29
2
samba file server - sediskoperatorprivilege not being honored
Hello,
I've been setting up new file server using samba 4.8.3 (centos 7 RPM),
as samba 4 AD member server using my earlier smb.conf when I realised
that I was previously somewhat circumventing the
SeDiskOperatorPrivilege by using "admin users map" to SAMDOM\Domain
admins" parameter in smb.conf.
I decided to change my smb.conf and setup shares following samba wiki.
All
2019 Jun 03
0
samba file server - sediskoperatorprivilege not being honored
...r of Domain Admins group"? If
>> it's the former, than there is no issue (I can change share ACL from
>> windows client using Administrator without changing any of the
>> permissions i.e. owner:group can stay as root:root), if it's the
>> latter, than I have anissue, since none other user from Domain Admins
>> can change any ACL, unless i change owner/group or add initial ACL to
>> domain admins (or any other user/group i gave sediskoperatorprivilege)
> I wouldn't use 'Domain Admins' if you are using the winbind 'ad'
>...
2019 Jun 03
0
samba file server - sediskoperatorprivilege not being honored
...d I understand it as "any member of Domain Admins group"?
If it's the former, than there is no issue (I can change share ACL from
windows client using Administrator without changing any of the
permissions i.e. owner:group can stay as root:root), if it's the latter,
than I have anissue, since none other user from Domain Admins can change
any ACL, unless i change owner/group or add initial ACL to domain
admins (or any other user/group i gave sediskoperatorprivilege)
I suspect it's the former, but if not, than I'm doing something wrong.
Regards,
Kacper
W dniu 29.05.2...