Displaying 1 result from an estimated 1 matches for "smbgenpdfprn".
2005 Mar 09
0
strange Samba3 / sudo / ldapsearch problem
...thing is okay. Since ldapsearch
isn't setuid root, and the Kerberos credentials cache /tmp/krb5cc_0 is
mode 0600 root.root, normal users can't run an ldapsearch against the KDC.
Creating KRBTGTs for 5000+ users isn't really an option :-)
The PDF creating script (which was derived from smbgenpdfprn) needs to
run this query but Samba runs the backend script with the connecting
user's UID/GID mapped by winbind. I tried "force user = root" but that
did not work.
Using sudo w/ NOPASSWD appears to be the straightforward solution. As a
local user, I can run "sudo ldapsearch .......