Re: [Samba] Question regarding Samba rights
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 beast wrote: Since account policy is unique to every user, why there is an account_policy.tdb file, why not just added to to ldap just like sambaLogonHours? account_policy.tdb is just the database I used for storing privilege assignments. Also account policy is not unique to every user. It is a global group of settings applied to all users. And yes privileges should be shared between DCs. it's been on the TODO list for a while now. cheers, jerry = Samba--- http://www.samba.org Centeris --- http://www.centeris.com What man is a man who does not make the world better? --Balian -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.4 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFE9E//IR7qMdg1EfYRAvIrAJ4uQaa7oZxcouEibEBstU7ZPohDFwCg4tla LKPP+b89GM5x/wwxNh5O448= =OYlq -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Question regarding Samba rights
Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 beast wrote: Where did samba store information regarding user privilege? account_policy.tdb Do I need to runs same commands to all domain controllers? For now, yes. Hi Jerry, Since account policy is unique to every user, why there is an account_policy.tdb file, why not just added to to ldap just like sambaLogonHours? --beast -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Question regarding Samba rights
beast escreveu: Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 beast wrote: Where did samba store information regarding user privilege? account_policy.tdb Do I need to runs same commands to all domain controllers? For now, yes. Hi Jerry, Since account policy is unique to every user, why there is an account_policy.tdb file, why not just added to to ldap just like sambaLogonHours? --beast Hi. I use samba 3.0.14a yet, but if I remeber right, policy settings can be exported to ldap since 3.0.21. root # pdbedit -y -i tdbsam -e ldapsam About privileges, that the first message was talking about I dont know the current ldap status. Regards. Edmundo Valle Neto -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Question regarding Samba rights
Where did samba store information regarding user privilege? It seems stored locally to server where the net rpc rights grant command runs on. Do I need to runs same commands to all domain controllers? --beast -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Question regarding Samba rights
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 beast wrote: Where did samba store information regarding user privilege? account_policy.tdb Do I need to runs same commands to all domain controllers? For now, yes. jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.4 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFE8HuGIR7qMdg1EfYRAufCAKCfEh+kz5HRF8dr1TLXi+VVnS8Q0QCgwlPt VjkghonqwyGjHmMdqz4Uvv8= =vsDD -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba