search for: sediskoperatorprivileg

...omarta via samba <samba at lists.samba.org> wrote: > > > Update: > > > > I have revoked the privilege to BUILIN\Administratos. As before, no > > root mapping. > > > > root at member:/# net rpc rights revoke "BUILTIN\Administrators" > > SeDiskOperatorPrivilege -U "MAD\luis" Password for [MAD\luis]: > > Successfully revoked rights. > > > > root at member:/# net rpc rights list privileges > > SeDiskOperatorPrivilege -Uluis Password for [MAD\luis]: > > SeDiskOperatorPrivilege: > > > > Reboot. Or else ...

...a.org> wrote: > > > > > Update: > > > > > > I have revoked the privilege to BUILIN\Administratos. As before, > > > no root mapping. > > > > > > root at member:/# net rpc rights revoke "BUILTIN\Administrators" > > > SeDiskOperatorPrivilege -U "MAD\luis" Password for [MAD\luis]: > > > Successfully revoked rights. > > > > > > root at member:/# net rpc rights list privileges > > > SeDiskOperatorPrivilege -Uluis Password for [MAD\luis]: > > > SeDiskOperatorPrivilege: > > >...

...> sharing out. If you are either the user, or a member of the group >> > you can then modify the ACLs, if you are not then you can't modify >> > the ACLs. >> > >> > Regards, >> > >> > > >OK, there seems to be consensus on this, 'SeDiskOperatorPrivilege' no >longer seems to do anything. > >So, Jeremy do you know how it is/was supposed to work ? I would ask the >guy who appears to have added it, but Elvis has left the building ;-) "git grep SeDiskOperatorPrivilege" gives: docs-xml/smbdotconf/misc/addsharecommand.xml:...

Hi, I have a samba server setup as a domain member. I am trying to grant SeDiskOperatorPrivilege to some user accounts e.g. "domainaname\User", but I always get the above error. It doesnot matter what I specify as the server in -S option to the command. The command syntax I use is: net rpc rights grant "username" SeDiskOperatorPrivilege OR net -S ADserver -U...

I have sssd configured and working with my domain member server and I now wish to grant the SeDiskOperatorPrivilege to the "MYDOMAIN\Domain Admins" group. When I execute the command it appears to disregard the domain name and grant the privileges to the group "Unix Group\domain admins" net rpc rights list accounts -U'MYDOMAIN\administrator' Enter MYDOMAIN\administrator's passwor...

Dear experts, I am having following problem on samba server side . please help me . 1) our device is running with samba server , in order to allow Microsoft windows mmc to change samba share permissions I am giving SeDiskOperatorPrivilege ( net rpc rights grant admin SeDiskOperatorPrivilege) privilege to samba users. This is working fine as long as our device is in standalone work group mode. 2) it is giving the below problem when we move the device to some domain. I am logging into device with domain administrator account...

On Sun, 9 Jun 2024 16:53:30 +0100 Luis Peromarta via samba <samba at lists.samba.org> wrote: > Mmm? strange ? Or is this what you were expecting ? No > > root at member:/# net rpc rights list privileges SeDiskOperatorPrivilege > -Uadministrator Password for [MAD\administrator]: > Could not connect to server 127.0.0.1 > The username or password was not correct. > Connection failed: NT_STATUS_LOGON_FAILURE > > root at member:/# net rpc rights list privileges SeDiskOperatorPrivilege > -Uadministrator...

...rivileges assigned BUILTIN\Backup Operators No privileges assigned BUILTIN\Server Operators No privileges assigned BUILTIN\Administrators SeMachineAccountPrivilege SeTakeOwnershipPrivilege SeBackupPrivilege SeRestorePrivilege SeRemoteShutdownPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege SeSecurityPrivilege SeSystemtimePrivilege SeShutdownPrivilege SeDebugPrivilege SeSystemEnvironmentPrivilege SeSystemProfilePrivilege SeProfileSingleProcessPrivilege SeIncreaseBasePriorityPrivilege SeLoadDriverPrivilege SeCreatePagefilePrivilege SeIncreaseQuotaPrivilege SeChangeNotifyPrivilege SeUn...

...Sun, 9 Jun 2024 18:52:39 +0100 Luis Peromarta via samba <samba at lists.samba.org> wrote: > Update: > > I have revoked the privilege to BUILIN\Administratos. As before, no > root mapping. > > root at member:/# net rpc rights revoke "BUILTIN\Administrators" > SeDiskOperatorPrivilege -U "MAD\luis" Password for [MAD\luis]: > Successfully revoked rights. > > root at member:/# net rpc rights list privileges SeDiskOperatorPrivilege > -Uluis Password for [MAD\luis]: > SeDiskOperatorPrivilege: > > Reboot. Or else 'net cache flush && /etc/...

Mmm? strange ? Or is this what you were expecting ? root at member:/# net rpc rights list privileges SeDiskOperatorPrivilege -Uadministrator Password for [MAD\administrator]: Could not connect to server 127.0.0.1 The username or password was not correct. Connection failed: NT_STATUS_LOGON_FAILURE root at member:/# net rpc rights list privileges SeDiskOperatorPrivilege -Uadministrator Password for [MAD\administrator]: C...

...user, or a member of > >> > the group you can then modify the ACLs, if you are not then you > >> > can't modify the ACLs. > >> > > >> > Regards, > >> > > >> > > > > >OK, there seems to be consensus on this, 'SeDiskOperatorPrivilege' no > >longer seems to do anything. > > > >So, Jeremy do you know how it is/was supposed to work ? I would ask > >the guy who appears to have added it, but Elvis has left the > >building ;-) > > "git grep SeDiskOperatorPrivilege" gives: > >...

...Ls. Regards, Bailey > -----Original Message----- > From: samba <samba-bounces at lists.samba.org> On Behalf Of Rowland > Penny via samba > Sent: June 11, 2024 6:21 AM > To: samba at lists.samba.org > Cc: Rowland Penny <rpenny at samba.org> > Subject: Re: [Samba] SeDiskOperatorPrivilege_Privilege > > On Mon, 10 Jun 2024 13:38:21 +0100 > Rowland Penny via samba <samba at lists.samba.org> wrote: > > > On Mon, 10 Jun 2024 08:33:13 +0100 > > Rowland Penny via samba <samba at lists.samba.org> wrote: > > > > > On Sun, 9 Jun 2024 18:5...

...migrate services. The MIT / openldap and samba4 AD servers are on different machines. My script (based on LPHvB's instructions) sets privileges in the following way: [..] systemctl restart bind9 ntp samba-ad-dc sleep 5 SAMBA_DC_ADMIN_GROUP_CHOICE="BUILTIN\Administrators" PRIVS="SeDiskOperatorPrivilege SeTakeOwnershipPrivilege \ SeBackupPrivilege SeRestorePrivilege SeRemoteShutdownPrivilege \ SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege \ SeSecurityPrivilege SeSystemtimePrivilege SeShutdownPrivilege \ SeDebugPrivilege SeSystemEnvironmentPrivilege SeSystemProfilePrivilege...

...id file rights MS terminals can see shares on this server. But giving this privilege fails with a bit random results. [me at server]$ getent group "DOMAIN\Domain Admins" domain admins:*:978600512:me.user,administrator [me at server]$ net rpc rights grant "DOMAIN\Domain Admins" SeDiskOperatorPrivilege -UDOMAIN\\Administrator -S server Enter DOMAIN\Administrator's password: Could not connect to server server Connection failed: NT_STATUS_LOCK_NOT_GRANTED [me at server]$ net rpc rights grant "DOMAIN\Domain Admins" SeDiskOperatorPrivilege -UDOMAIN\\Administrator -S server.domain.loca...

...ix, works just like any other Unix > user or group and only has the permissions you assign to them. > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > When a now try to set SeDiskOperatorPrivilege to "DOMAIN\Domain Admins" it is set for "Unix Group\domain admins"? Is this correct as I had expected it to be "DOMAIN\Domain Admins"? root at aphrodite:~# net rpc rights grant 'DOMAIN\Domain Admins' SeDiskOperatorPrivilege -U'DOMAIN\administrator' En...

On 20 January 2016 at 06:43, Rowland penny <rpenny at samba.org> wrote: > On 19/01/16 19:34, Henry McLaughlin wrote: > >> I have sssd configured and working with my domain member server and I now >> wish to grant the SeDiskOperatorPrivilege to the "MYDOMAIN\Domain Admins" >> group. When I execute the command it appears to disregard the domain name >> and grant the privileges to the group "Unix Group\domain admins" >> >> net rpc rights list accounts -U'MYDOMAIN\administrator' >&gt...

I am having trouble giving the Domain Admin group the 'SeDiskOperatorPrivilege' privilege on a member server. Running 'net rpc rights list accounts -UAdministrator' Results in this: Enter Administrator's password: BUILTIN\Print Operators No privileges assigned BUILTIN\Account Operators No privileges assigned BUILTIN\Backup Operators No privileges assigne...

Hello, I've been setting up new file server using samba 4.8.3 (centos 7 RPM), as samba 4 AD member server using my earlier smb.conf when I realised that I was  previously somewhat circumventing the SeDiskOperatorPrivilege by using "admin users map" to SAMDOM\Domain admins" parameter in smb.conf. I decided to change my smb.conf and setup shares following samba wiki. All shares are going to be used strictly by windows clients (AD domain members), so I've followed closely samba wiki. I granted...

...r smb server. People can login to the share using their AD credentials and when I run getent group "NSD\Domain Admins”, it returns a list of people. So I know it’s talking to the AD server ok. The problem is when I run the following command: net rpc rights grant "NSD\Domain Admins" SeDiskOperatorPrivilege -U "NSD\Administrator" It asks me to the domain admin password Enter NSD\Administrator's password: I enter the password and I get this in response: Failed to grant privileges for NSD\Domain Admins (NT_STATUS_NO_SUCH_USER) I’ve added what I need to, to fstab UUID=fd1a97e7-28ea-4df8-9...

...t giving this >> privilege fails with a bit random results. >> >> [me at server]$ getent group "DOMAIN\Domain Admins" >> domain admins:*:978600512:me.user,administrator >> >> [me at server]$ net rpc rights grant "DOMAIN\Domain Admins" >> SeDiskOperatorPrivilege -UDOMAIN\\Administrator -S server >> Enter DOMAIN\Administrator's password: >> Could not connect to server server >> Connection failed: NT_STATUS_LOCK_NOT_GRANTED >> >> [me at server]$ net rpc rights grant "DOMAIN\Domain Admins" >> SeDiskOperatorPr...