search for: ceertain

On 2015-10-29 12:23, Rowland Penny wrote: > On 29/10/15 09:47, Davor Vusir wrote: >> On 2015-10-29 09:52, Rowland Penny wrote: >>> On 29/10/15 08:34, Davor Vusir wrote: >>>> Hi all! >>>> >>>> We have got many delegations in our AD. To add a certain >>>> administrator group to the local Administrators group you can use

...n. > And as Samba database is not splitted in small files, if you give that > non-root user the ability to modify Samba database files, or just one file, > this user can modify all objects contained in that DB file. So the > granularity of that kind of fake-delegation is awfully bad and ceertainly > not what you want. > > Another way would be to reinvent the wheel installing products to access > Samba's LDAP and place ACL on the LDAP tree (no idea if Samba's LDAP tree > can do that) to simulate Windows delegation. > > But as I said, I need a nap right now :) &g...

...y the command you run. And as Samba database is not splitted in small files, if you give that non-root user the ability to modify Samba database files, or just one file, this user can modify all objects contained in that DB file. So the granularity of that kind of fake-delegation is awfully bad and ceertainly not what you want. Another way would be to reinvent the wheel installing products to access Samba's LDAP and place ACL on the LDAP tree (no idea if Samba's LDAP tree can do that) to simulate Windows delegation. But as I said, I need a nap right now :) 2015-10-29 14:10 GMT+01:00 Davor...

...ll files, if you give that >>> non-root user the ability to modify Samba database files, or just >>> one file, >>> this user can modify all objects contained in that DB file. So the >>> granularity of that kind of fake-delegation is awfully bad and >>> ceertainly >>> not what you want. >>> >>> Another way would be to reinvent the wheel installing products to >>> access >>> Samba's LDAP and place ACL on the LDAP tree (no idea if Samba's LDAP >>> tree >>> can do that) to simulate Windo...

...not splitted in small files, if you give that >> non-root user the ability to modify Samba database files, or just one >> file, >> this user can modify all objects contained in that DB file. So the >> granularity of that kind of fake-delegation is awfully bad and >> ceertainly >> not what you want. >> >> Another way would be to reinvent the wheel installing products to access >> Samba's LDAP and place ACL on the LDAP tree (no idea if Samba's LDAP >> tree >> can do that) to simulate Windows delegation. >> >> But a...

...e that >>>> non-root user the ability to modify Samba database files, or just >>>> one file, >>>> this user can modify all objects contained in that DB file. So the >>>> granularity of that kind of fake-delegation is awfully bad and >>>> ceertainly >>>> not what you want. >>>> >>>> Another way would be to reinvent the wheel installing products to >>>> access >>>> Samba's LDAP and place ACL on the LDAP tree (no idea if Samba's >>>> LDAP tree >>>> ca...