Displaying 4 results from an estimated 4 matches for "can_add_account".
2005 Jul 22
1
can't join to a domain... can_add_account is returning false
...usr/share/perl5/smbldap_tools.pm line 892, <DATA> line 283.
[2005/07/22 14:56:28, 0]
rpc_server/srv_samr_nt.c:_samr_create_user(2324)
_samr_create_user: Running the command `/usr/sbin/smbldap-useradd -w
"newt$"' gave 127
so for some reason my account (root) is not passing the can_add_account
test and the add user script is not being run as root.
I don't know why since root is a member of the correct groups
#groups root
root : Domain Admins Administrators
I've also tried it with "Administrator" who is a member of the same
groups
This is with the ldapsam backend fo...
2005 Mar 14
2
Questions about 3.0.12rc1
...) to the group
(%s)\n",
unix_user, unix_group));
return -1;
^^^^^^^^^^^^^^^^^^^^^^^^^^
needed return 0;
}
3) I'm analized problems 1
( user who not have privileges "add machine account" )
In function _samr_create_user ( srv_samr_nt.c ) you have code:
if ( can_add_account )
become_root();
And if user not have privileges(user|machine) you MAY CREATE USER (
posix account or machine account ) through SCRIPT :(((((
I'm change code to:
if ( can_add_account == False ) {
return NT_STATUS_ACCESS_DENIED;
}
it's fixed problem ....
I'm do simple test an...
2005 Mar 17
0
usrmgr.exe and problems
...= pdb_init_sam(&sam_user);
+
if (!NT_STATUS_IS_OK(ret))
return ret;
+ become_root();
check = pdb_getsampwsid(sam_user, &user_sid);
+ unbecome_root();
if (check != True) {
pdb_free_sam(&sam_user);
@@ -3708,6 +3716,7 @@
uint32 acc_granted;
SE_PRIV se_rights;
BOOL can_add_accounts;
+ BOOL ret;
/*
* delete the group member named q_u->rid
@@ -3740,7 +3749,12 @@
/* check if the user exists before trying to remove it from the group */
pdb_init_sam(&sam_pass);
- if (!pdb_getsampwsid(sam_pass, &user_sid)) {
+
+ become_root();
+ ret = pdb_getsampwsid(sam_p...
2005 May 11
1
SV: Error with usrmgr and groups.
It's exactly the same. Except that I use tdbsam instead of ldap and the error message therefore also is different in the log file. But the example and result is the same. Do you have any idea of workaround or fix?
Cheers,
Joel
-----Ursprungligt meddelande-----
Fr?n: Doug Campbell [mailto:doug@bpta.net]
Skickat: den 11 maj 2005 10:49
Till: Joel Larsson, PF, Posten; samba@lists.samba.org