similar to: Samba 3.5.2 : root and Domain Admins membership

Hi, I'm trying to set up one of my users to be a domain admin. I have unix/ldap group called "domainadm" with "user1" a member of the group. When I run "net groupmap list" I get the following: Domain Admins (S-1-5-21-186220259-3826000728-3192352269-7033) -> domainadm But when I go to log in to the domain with "user1" on a winxp machine, the

I was experimenting with centralized administration of Linux administrative privileges, so I created the group. (I have to assume that there's nothing fundamentally wrong with creating a domain group for some special purpose.) I then added to /etc/sudoers: ??? %SAMDOM\\wheel ALL=(ALL:ALL) ALL and to /etc/pam.d/su ??? auth??????? required??? pam_wheel.so use_uid group=SAMDOM\wheel With

On Fri, 14 Feb 2025 10:51:57 -0500 "John R. Graham via samba" <samba at lists.samba.org> wrote: > I was experimenting with centralized administration of Linux > administrative privileges, so I created the group. (I have to assume > that there's nothing fundamentally wrong with creating a domain group > for some special purpose.) I then added to /etc/sudoers:

On Fri, 14 Feb 2025 12:14:18 -0500 "John R. Graham via samba" <samba at lists.samba.org> wrote: > On 2/14/25 11:22, Rowland Penny via samba wrote: > > Well yes, you can do it that way, but there is an easier way. > > There is a group in AD called 'Domain Admins' > > Add any AD users that you want to be domain administrators to that > > group,

On 2/14/25 15:01, Rowland Penny via samba wrote: > On Fri, 14 Feb 2025 12:14:18 -0500 > "John R. Graham via samba"<samba at lists.samba.org> wrote: > On 2/14/25 11:22, Rowland Penny via samba wrote: >> So, for an undiagnosed reason, the effective domain membership does >> not include "domain admins" either. >> >> - John > OK, I will

On 2/14/25 11:22, Rowland Penny via samba wrote: > Well yes, you can do it that way, but there is an easier way. > There is a group in AD called 'Domain Admins' > Add any AD users that you want to be domain administrators to that > group, then, using visudo add this line to the sudo config: > > %SAMDOM\\domain\ admins ALL=(ALL:ALL) ALL > > Where 'SAMDOM' is

On Wed, 31 Jan 2024 20:02:55 +0100 Stefan Kania via samba <samba at lists.samba.org> wrote: > > > Am 31.01.24 um 17:45 schrieb Kees van Vloten via samba: > > > > Op 31-01-2024 om 17:21 schreef Stefan Kania via samba: > >> Hi all, > >> > >> it's again a question about FL 2016 and if samba supports it. If > >> yes, how can I use

Op 31-01-2024 om 17:21 schreef Stefan Kania via samba: > Hi all, > > it's again a question about FL 2016 and if samba supports it. If yes, > how can I use it without powershell. > > In FL 2016 there is the possibility to put a user into a group and the > membership is time based. So I could put the user Foo into the group > 'domain admins' for 30 minutes and

Hello All, Can anyone tell me where i can get a "starter" dictionary for crackcheck? i tried googling this but didn't find anything. tia

Am 31.01.24 um 17:45 schrieb Kees van Vloten via samba: > > Op 31-01-2024 om 17:21 schreef Stefan Kania via samba: >> Hi all, >> >> it's again a question about FL 2016 and if samba supports it. If yes, >> how can I use it without powershell. >> >> In FL 2016 there is the possibility to put a user into a group and the >> membership is time

Hi, We have a Windows Domain and a few Linux boxes on which we have installed Samba and set them up so people can log in using their windows domain logins using winbind etc. All is working fine EXCPECT for the group memberships. I have a windows user who is a member of the "Domain Admins" group and I want them to have root privilegdes on the UNIX box. I added a group mapping using

Samba 3.5.9. We have printers exported to Windows and have the following options configured: enable privileges = yes load printers = yes printing = cups printcap name = cups cups options = raw [printers] admin users = @printer-admins comment = All Printers browseable = yes path = /var/spool/samba printable = yes public = yes [print$] admin users = @printer-admins write list =

On Fri, 14 Feb 2025 10:03:33 -0500 "John R. Graham via samba" <samba at lists.samba.org> wrote: > On my Linux domain members, group membership for my domain login is > reported as: > > ??? terra #? id SAMDOM\\jgraham > ??? uid=11105(SAMDOM\jgraham) gid=10513(SAMDOM\domain users) > groups=10513(SAMDOM\domain >

On 31-01-2024 20:36, Rowland Penny via samba wrote: > On Wed, 31 Jan 2024 20:02:55 +0100 > Stefan Kania via samba <samba at lists.samba.org> wrote: > >> >> Am 31.01.24 um 17:45 schrieb Kees van Vloten via samba: >>> Op 31-01-2024 om 17:21 schreef Stefan Kania via samba: >>>> Hi all, >>>> >>>> it's again a question about FL

Hello! A good day to you all. i'm trying to set up samba(2.2.3a, right out of the rh7.3 cds) as a PDC. i've already read through the Samba-howto collection, and am confident that i've put in all the necessary samba options. /etc/samba/smb.conf: [global] netbios name = pdc1 workgroup = testing security = user domain logon = yes domain master = yes local master = yes domain admin

Hi, I have a samba 4.7 AD DC running on a Ubuntu 18.04 server with distro packages. I update a user with a new group and this new membership is not reflected on that user. On example below, I can successfully add the user "test.account" to group "test", but not my user "marcio.merlone": root at araucaria:~# id test.account uid=30214(A1\test.account)

Hi all, it's again a question about FL 2016 and if samba supports it. If yes, how can I use it without powershell. In FL 2016 there is the possibility to put a user into a group and the membership is time based. So I could put the user Foo into the group 'domain admins' for 30 minutes and after 30 minutes the system will remove user foo from the group. But to activated this

Hi there, I'm trying to configure Squid to use a windows domain for authentication, and all goes well until I add the "--require-membership-of" option on ntlm_auth. I need to restrict access based on group membership, however ntlm_auth does not seem to be behaving correctly. I'm using Samba 3.0.6 on Debian and I'm using a Windows 2000 (SP4) Domain Controller. I

Hi, I joined samba server (linux box centos 5.4) under samba 3.4.7 to Windows Domain at windows server 2003. wbinfo -g shows me all the groups from the AD and wbinfo -u shows me all the users. Then yesterday i upgraded to samba version 3.5.2, restarted windbind and smb. Then, when i make: wbinfo -g then i see nothing. wbinfo -u shows me all the user in Active Directory. In previous version

Hi all, I have just noticed the following situation: Our NT4-style domain users are often (not always) seen by Windows XP as members of Domain Users and Domain Guests and Domain Admins and Domain Computers although they are definitely only members of "Domain Users". This gives us a security problem as "Domain Admins" become local Administrators. They are no real