Displaying 4 results from an estimated 4 matches for "x20admins".
Did you mean:
040admins
2015 Apr 19
2
Possible Security Hole (Bug?)
...'DOMAIN\Administrator' should have a uid-/gidNumber. All domain
>> accounts and groups should have their uid-/gidNumber set.
>
> # visudo -f /etc/sudoers.d/domain
> # Members of the "domain admins" group may do about anything.
> # And rightfully so.
> %domain\x20admins ALL=(ALL:ALL) ALL
>
> Apply liberally, where it is warranted.
>
If there is a need to grant selected domain users elevated rights on
the Linux host. In this case root privilieges. This is one way of
doing it. Rowland mentioned another.
> But to the thoughts train, every user is just o...
2015 Apr 18
2
Possible Security Hole (Bug?)
2015-04-17 10:01 GMT+02:00 Rowland Penny <rowlandpenny at googlemail.com>:
> On 16/04/15 19:26, David Willis wrote:
>>
>> Thank you for the reply.
>>
>> Forgive me if I am not understanding correctly, but..
>>
>> I have heard conflicting reports about whether or not to assign UID to
>> DOM\administrator, even from threads read on these lists :)
2015 Apr 18
0
Possible Security Hole (Bug?)
...Samba is contained and
> 'DOMAIN\Administrator' should have a uid-/gidNumber. All domain
> accounts and groups should have their uid-/gidNumber set.
# visudo -f /etc/sudoers.d/domain
# Members of the "domain admins" group may do about anything.
# And rightfully so.
%domain\x20admins ALL=(ALL:ALL) ALL
Apply liberally, where it is warranted.
But to the thoughts train, every user is just one user.
Mapping user to other user is creating a mess you don't want to solve
yourself.
--
With best regards,
Andrey Repin
Sunday, April 19, 2015 01:11:07
Sorry for my terrible englis...
2015 Apr 19
0
Possible Security Hole (Bug?)
...ministrator' should have a uid-/gidNumber. All domain
>>> accounts and groups should have their uid-/gidNumber set.
>> # visudo -f /etc/sudoers.d/domain
>> # Members of the "domain admins" group may do about anything.
>> # And rightfully so.
>> %domain\x20admins ALL=(ALL:ALL) ALL
>>
>> Apply liberally, where it is warranted.
>>
> If there is a need to grant selected domain users elevated rights on
> the Linux host. In this case root privilieges. This is one way of
> doing it. Rowland mentioned another.
>
>> But to the th...