Quoting simo <[EMAIL PROTECTED]>:
On Mon, 2006-01-16 at 09:41 +0000, James Cort wrote:
Hi,
The Problem:
I have a samba domain using LDAP as the backend, complete with the
IdealX LDAP scripts.
Most of my Unix boxes (certainly anything which does any Samba stuff)
authenticates against the same LDAP backend, using it for groups and
users.
I need to grant some people sufficient priviliges to add workstations
to the domain, but I don't want to give them the root password in LDAP
as doing so will also give them root access to the Unix boxes.
Set "enable privileges = yes" in smb.conf
Create a specific group for the users that you want to be able to add
the group.
Map the group with net groupmap
When done, use net rights grant to grant this group the
SeMacchineAccount privilege.
No need to chown the scripts, samba will take care of everything.
Ab-so-lutely wonderful. Works like a charm. Many thanks.
James.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
