Dietrich Streifert
2003-Oct-08 09:36 UTC
[Samba] Samba 3.0.0: option admin user not working in smb.conf?
Hello List! I successfully installed, configured and joined Samba 3.0.0 on Solaris 9 to Windows 2000 Active Directory. I tried to set the option admin user in smb.conf to user (ingres). After doing so the user isn't able to connect or browse to the Samba server anymore. Without this option the user just connects fine and is able to browse the Samba server. The goal is to have the user connect with root privileges to the Sambe share. Any help would be great. Thank you. log.smbd --------------------------------------------------------------- smbd version 3.0.0 started. Copyright Andrew Tridgell and the Samba Team 1992-2003 [2003/10/08 11:27:52, 1] lib/username.c:map_username(106) ##### Username Mapfile /opt/samba/private/username.map for user [2003/10/08 11:27:52, 1] lib/username.c:map_username(106) ##### Username Mapfile /opt/samba/private/username.map for user ingres [2003/10/08 11:27:52, 0] smbd/service.c:set_admin_user(314) ingres logged in as admin user (root privileges) [2003/10/08 11:27:52, 0] smbd/service.c:make_connection_snum(569) make_connection: connection to development denied due to security descriptor. --------------------------------------------------------------- smb.conf: --------------------------------------------------------------- # Samba config file created using SWAT # from 192.168.0.2 (192.168.0.2) # Date: 2003/10/08 10:28:36 # Global parameters [global] unix charset = ISO-8859-1 workgroup = EDELSTEIN realm = EDELSTEIN.DE security = ADS wins server = 192.168.0.23 create mask = 0740 directory mask = 0750 username map = /opt/samba/private/username.map [homes] comment = Homedirectory read only = No [development] comment = Development path = /development read only = No admin users = ingres --------------------------------------------------------------- -- Best Regards, Dietrich Streifert mailto:dietrich.streifert@visionet.de
Steve Jr Ramage
2003-Oct-08 22:16 UTC
[Samba] Samba 3.0.0: option admin user not working in smb.conf?
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I may be mistaken, but I believe the admin user= was taken out of Samba 3.0. In any case, for a variety of reasons, what I did was I chowned everything to a non root user, and have my would be admin connect as that, then I set force group = pub on the share and guest ok so that other people can still access the share and its files read only, and what not. Samba 3 also has new parameters something like writelist= and readlist= putting users in there gives them the ability to write to the share (I may not have the names exact) Steve - -----Original Message----- From: Dietrich Streifert [mailto:dietrich.streifert@visionet.de] Sent: October 8, 2003 02:37 To: samba@lists.samba.org Subject: [Samba] Samba 3.0.0: option admin user not working in smb.conf? Hello List! I successfully installed, configured and joined Samba 3.0.0 on Solaris 9 to Windows 2000 Active Directory. I tried to set the option admin user in smb.conf to user (ingres). After doing so the user isn't able to connect or browse to the Samba server anymore. Without this option the user just connects fine and is able to browse the Samba server. The goal is to have the user connect with root privileges to the Sambe share. Any help would be great. Thank you. log.smbd - --------------------------------------------------------------- smbd version 3.0.0 started. Copyright Andrew Tridgell and the Samba Team 1992-2003 [2003/10/08 11:27:52, 1] lib/username.c:map_username(106) ##### Username Mapfile /opt/samba/private/username.map for user [2003/10/08 11:27:52, 1] lib/username.c:map_username(106) ##### Username Mapfile /opt/samba/private/username.map for user ingres [2003/10/08 11:27:52, 0] smbd/service.c:set_admin_user(314) ingres logged in as admin user (root privileges) [2003/10/08 11:27:52, 0] smbd/service.c:make_connection_snum(569) make_connection: connection to development denied due to security descriptor. - --------------------------------------------------------------- smb.conf: - --------------------------------------------------------------- # Samba config file created using SWAT # from 192.168.0.2 (192.168.0.2) # Date: 2003/10/08 10:28:36 # Global parameters [global] unix charset = ISO-8859-1 workgroup = EDELSTEIN realm = EDELSTEIN.DE security = ADS wins server = 192.168.0.23 create mask = 0740 directory mask = 0750 username map = /opt/samba/private/username.map [homes] comment = Homedirectory read only = No [development] comment = Development path = /development read only = No admin users = ingres - --------------------------------------------------------------- - -- Best Regards, Dietrich Streifert mailto:dietrich.streifert@visionet.de -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (MingW32) iD8DBQE/hDzKEK+EAP2ExcQRAmmtAKCQiNCS82SKGKmWlLu0uTrW2HZNyQCbB4bL JFv4KoCOcFQcaRhiSB+CzSU=HPcB -----END PGP SIGNATURE-----