search for: print_operators

...~]# id clearcenter > uid=1049(clearcenter) gid=63000(allusers) > groups=63000(allusers),1000546(guests),1000512(domain_admins),1000513(domain_users),1000514(domain_guests),1000544(administrators),1000545(users),1000547(power_users),1000548(account_operators),1000549(server_operators),1000550(print_operators),1000551(backup_operators),60006(executive),60007(staff),60008(visitors),60009(admin) > I have no idea why the groups are getting those numbers because you have in smb.conf: idmap config * : range = 20000000-29999999 So I would have expected the numbers such as 1000513 to actually be 20000513...

On 20/07/2020 10:37, Nick Howitt via samba wrote: > Bump, please. I have reviewed all the posts in this thread and I 'think' I know what is going on and also answers a question I asked. You have in your smb.conf: unix password sync = Yes This possibly means that you have a group in /etc/group called allusers with the ID of 63000 I would replace the line with: ldap password sync

...b/ [netlogon] comment = Network Logon Service path = /var/lib/samba/netlogon guest ok = yes writable = no browseable = no share modes = no [printers] comment = Printers path = /var/spool/samba browseable = no guest ok = yes public = yes writable = no printable = yes printer admin = +Print_Operators [print$] comment = Printer Driver Download Area path = /var/lib/samba/printers browseable = no guest ok = yes read only = yes write list = +Print_Operators [public_share] comment = Local Public Share path = /pub public = no writable = yes printable = no valid users = +Domain_Users cr...

I just installed Red Hat v. 6.2 and would like to configure SAMBA. I was wondering if you could point me to some good documentation sites that can lead me step by step through setup and configuration of SAMBA. I'll be experimenting with it in the meantime but your help will be extremely helpfull. Thank you, Jerry Lawson MCSE, MCP +Internet

...at server ~]# id clearcenter uid=1049(clearcenter) gid=63000(allusers) groups=63000(allusers),1000546(guests),1000512(domain_admins),1000513(domain_users),1000514(domain_guests),1000544(administrators),1000545(users),1000547(power_users),1000548(account_operators),1000549(server_operators),1000550(print_operators),1000551(backup_operators),60006(executive),60007(staff),60008(visitors),60009(admin) > > I would replace the line with: > > ldap password sync = yes That is explicitly set to No in the included /etc/samba/smb.ldap.conf. I am scared to change this as it is working in my system. >...

...-> 544 users (S-1-5-21-1129281578-1295143107-3311307472-545) -> users guests (S-1-5-21-1129281578-1295143107-3311307472-546) -> nobody power_users (S-1-5-21-1129281578-1295143107-3311307472-547) -> 547 account_operators (S-1-5-32-548) -> 548 server_operators (S-1-5-32-549) -> sys print_operators (S-1-5-32-550) -> lp backup_operators (S-1-5-32-551) -> bin replicator (S-1-5-21-1129281578-1295143107-3311307472-552) -> daemon computers (S-1-5-21-1129281578-1295143107-3311307472-515) -> dcomputers Enterprise Admins (S-1-5-21-1129281578-1295143107-3311307472-519) -> 519 [root@whs1...

...==================== Share Definitions [printers] comment = Printers path = /var/spool/samba browseable = no guest ok = no writable = no printable = yes [print$] comment = Printer Driver Download Area path = /etc/samba/drivers browseable = no guest ok = no read only = yes write list = +Print_Operators, sambaroot [public_share] comment = Local Media Private Share path = /pub guest ok = no writable = yes printable = no valid users = +Domain_Admins, +Domain_Users create mask = 0644 force create mode = 0644 directory mask = 175...

...u=computers ldap passwd sync = Yes ldap suffix = dc=mydomain,dc=de ldap ssl = start tls ldap user suffix = ou=people idmap backend = ldap:ldap://pdc.mydomain.de idmap uid = 10000-20000 idmap gid = 10000-20000 ldapsam:trusted = yes printer admin = @Domain_Admins, @Print_Operators, Administrator map acl inherit = Yes lprm command = /usr/bin/cancel '%p-%j' lppause command = lp -i '%p-%j' -H hold lpresume command = lp -i '%p-%j' -H resume queuepause command = /usr/bin/disable '%p' queueresume command = /usr/bin/enable ...

...Administrators (S-1-5-32-544) -> administrators Users (S-1-5-32-545) -> users Power Users (S-1-5-32-547) -> power_users Account Operators (S-1-5-32-548) -> account_operators Server Operators (S-1-5-32-549) -> server_operators Print Operators (S-1-5-32-550) -> print_operators Backup Operators (S-1-5-32-551) -> backup_operators executive (S-1-5-21-1661951805-1908507638-2940817366-60006) -> executive staff (S-1-5-21-1661951805-1908507638-2940817366-60007) -> staff visitors (S-1-5-21-1661951805-1908507638-2940817366-60008) -> visitors admin...

Hello, Is it really possible that just the user root with the samba password can join workstations into the domain? I have also some other users who are domain administrator, but with this users i can't join any workstations into the domain. This is mor me a important security point, because I want to give some people the acces right to join workstations into domain and only this function.