search for: privlieg

Hi, Recently, i worked in a pilot project to migrate a NT4 Domain to Samba3 + OpenLDAP. They have a quite large user base, approx. 2500 accounts, plus approx. 1800 groups, which 200 are local groups. Unfortunately, we faced some problems, and i'd like to know if anyone has faced them too, and how overcame them: - User Rights and Privileges: This is kinda new in latest Samba release, 3.0.11,

I've been able to succesfully join XP boxes to the samba domain on samba 2.2.3a (yes, I know it's old), registering the machine name and so forth, as many guides and so forth have shown online. However, it requires entering root's smbpasswd when joining the domain -- and I'd rather not have a Windows machine with any sort of remotely related root access to our servers,

...X's login(1), or PAM. Setting UseLogin to Yes is not appropriate as explained below. The sshd daemon must run with certain privileges to support the changing of passwords, validating passwords, etc. In the normal UNIX realm, this is done as root, then changing to the user's UID removes the privliege. In the Trusted OS realm, the privilege is independant of the UID - changing to the user does not remove the privileges. Thus, the stock OpenSSH 4.0p1, when using PAM, results in a user shell with elevated privileges that they should not have, as they have been grated directly by the sshd process....