Hi,
I have a samba server setup as a domain member. I am trying to grant
SeDiskOperatorPrivilege to some user accounts e.g. domainaname\User,
but I always get the above error. It doesnot matter what I specify as
the server in -S option to the command. The command syntax I use is:
net
You need to tell net with which user you run the command:
net rpc rights grant USERNAME SeDiskOperatorPrivilege -Uroot
HTH,
Norberto
El 13/05/2010 9:53, Nagaraj Shyam nagaraj_sh...@symantec.com escribió:
Hi,
I have a samba server setup as a domain member. I am trying to grant
...@gmail.com]
Sent: Thursday, May 13, 2010 6:02 AM
To: Nagaraj Shyam
Cc: samba@lists.samba.org
Subject: Re: [Samba] net rpc rights grant root SeDiskOperatorPrivilege failed
with Failed to grant privileges for root (NT_STATUS_ACCESS_DENIED)
You need to tell net with which user you run the command
Hello
Since I upgraded from 3.3.9 to 3.4.3 the net rpc rights command
stops working properly
pdc:/usr/local/samba/etc/samba# net rpc rights list
Enter root's password:xxx
Could not connect to server 127.0.0.1
Connection failed: NT_STATUS_CONNECTION_REFUSED
the smb.conf file is exactly the same
On Thu, Nov 26, 2009 at 02:28:25PM +0100, Frank Bonnet wrote:
Hello
Since I upgraded from 3.3.9 to 3.4.3 the net rpc rights command
stops working properly
pdc:/usr/local/samba/etc/samba# net rpc rights list
Enter root's password:xxx
Could not connect to server 127.0.0.1
Connection
Hey Ryan,
The samba host is a domain member server (security=ADS)
with winbind for user accounts. Where is this user rights
database stored and what is the tool to assign admin privileges?
Use 'net sam' to add the user in question to the BUILTIN\Administrators
group on your Samba host.
Gerald Carter wrote:
Hey Ryan,
The samba host is a domain member server (security=ADS)
with winbind for user accounts. Where is this user rights
database stored and what is the tool to assign admin privileges?
Use 'net sam' to add the user in question to the BUILTIN\Administrators
Ryan Suarez wrote:
Thanks, it worked for me! Looks like the local BUILTIN\Administrators
has all those rpc rights granted by default.
Correct. Glad things are working now.
cheers, jerry
signature.asc
Description: OpenPGP digital signature
--
To unsubscribe from this list go to the
Adam Nielsen wrote:
Use 'net sam' to add the user in question to the BUILTIN\Administrators
group on your Samba host.
# /usr/local/samba/bin/net rpc rights grant testpc1
SePrintOperatorPrivilege -U testpc1
Failed to grant privileges for testpc1 (NT_STATUS_ACCESS_DENIED)
Oh, so
Use 'net sam' to add the user in question to the BUILTIN\Administrators
group on your Samba host.
# /usr/local/samba/bin/net rpc rights grant testpc1
SePrintOperatorPrivilege -U testpc1
Failed to grant privileges for testpc1 (NT_STATUS_ACCESS_DENIED)
Oh, so does 'net rpc' in this case
Hey Adam,
Use 'net sam' to add the user in question to the BUILTIN\Administrators
group on your Samba host.
# /usr/local/samba/bin/net rpc rights grant testpc1
SePrintOperatorPrivilege -U testpc1
Failed to grant privileges for testpc1 (NT_STATUS_ACCESS_DENIED)
Oh, so does 'net rpc' in
Well, I wasn't actually able to run the net rpc rights grant. I was
still getting the access denied errors. Instead, I just added testpc1
as a member of the local Builtin/Administrators group which has all the
rpc rights by default.
Well now testpc1 is an admin you should be able to run the
Thanks for the response.
Adam Nielsen wrote:
RE: net rpc rights grant testpc1 SePrintOperatorPrivilege -U testpc1
Failed to grant privileges for testpc1 (NT_STATUS_ACCESS_DENIED)
samba_source_3.3.7 on redhat 5 64bit. I have root on the samba
server but I don't have admin access to active
Does the user granting access need some sort of admin privilege in
Active Directory? How do I grant this privilege on this samba host
(for which I have root) since I don't have admin access in Active
Directory?
Yes, if you want to change an object in Active Directory you will need
Ryan,
hmm, the best option for me is to ask the AD administrator to grant the
samba SePrintOperatorPrivilege directly to the user object in Active
Directory. Where is this added in AD and what is this privilege called?
The user rights database is maintained in Samba's passdb. If
you are
The samba host is a domain member server (security=ADS) with winbind for
user accounts. Where is this user rights database stored and what is
the tool to assign admin privileges?
I'm sure the privilege is stored in AD, which means you will need an AD
account with write access to the testpc1
Thanks for the response.
Gerald Carter wrote:
Ryan,
hmm, the best option for me is to ask the AD administrator to grant the
samba SePrintOperatorPrivilege directly to the user object in Active
Directory. Where is this added in AD and what is this privilege called?
The user rights
RE: net rpc rights grant testpc1 SePrintOperatorPrivilege -U testpc1
Failed to grant privileges for testpc1 (NT_STATUS_ACCESS_DENIED)
samba_source_3.3.7 on redhat 5 64bit. I have root on the samba
server but I don't have admin access to active directory (hence the
auth using testpc1).
So
RE: net rpc rights grant testpc1 SePrintOperatorPrivilege -U testpc1
Failed to grant privileges for testpc1 (NT_STATUS_ACCESS_DENIED)
samba_source_3.3.7 on redhat 5 64bit. I have root on the samba server
but I don't have admin access to active directory (hence the auth using
testpc1).
Does
my smb.conf:
http://pastebin.ca/1554626
Ryan Suarez wrote:
RE: net rpc rights grant testpc1 SePrintOperatorPrivilege -U testpc1
Failed to grant privileges for testpc1 (NT_STATUS_ACCESS_DENIED)
samba_source_3.3.7 on redhat 5 64bit. I have root on the samba server
but I don't have admin access
Hi!
I have a domain with samba+ldap working perfectly. The LDAP and Samba are in a linux
vserver machine, but in the main host, not in the guests. The machine has samba 3.0.22 and
debian sarge 3.1 up to date. Last week I try to assign privileges to different users with
the 'net rpc rights'
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Andrew Nash wrote:
I'm learning about the net command in Samba 3.0.10,\
but it looks like the 'net rpc rights' parameter isn't
there.
User rights were added in 3.0.11.
cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2
I'm learning about the net command in Samba 3.0.10, but it looks like the 'net
rpc rights' parameter isn't there. I can do other 'net rpc' stuff such as 'net
rpc group members Domain Admins' but 'net rpc rights' doesn't show up in the
help, and it looks like it's an invalid parameter. Is
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] wrote:
| net rpc rights grant TOPTEST\toptest.r \
| SeMachineAccountPrivilege -U domainadmin
|
| net rpc rights shows:
| hgest3201:~ # net rpc rights list accounts -Udomainadmin
| Password:
| TOPTEST\toptest.r
|
: samba@lists.samba.org; Laurenz, Dirk
-| Subject: Re: [Samba] net rpc rights problem with groups
-|
-| -BEGIN PGP SIGNED MESSAGE-
-| Hash: SHA1
-|
-| [EMAIL PROTECTED] wrote:
-|
-| | net rpc rights grant TOPTEST\toptest.r \
-| | SeMachineAccountPrivilege -U domainadmin
Hello List,
I have tried to grant SeMachineAccountPrivilege to an extra group.
Users in this group should not have Admin rights but they should be able to
join workstations to the domain.
My first try was to grant the right to a single user wich is working as
expected.
net rpc rights grant
Le Thu, Aug 25, 2005 at 02:58:30AM +0200, Andreas Bauer a ecrit:
I thought enables privileges = Yes is the rigth entry in smb.conf?
try enable instead of enables.
--
Jerome
--
To unsubscribe from this list go to the following URL and read the
instructions:
Hello,
i updated my samba to version 3.0.20 on a suse 9.2
system. I thought, some new net rpc commands need samba 3.0.13.
But I get faults with the command:
amd:~ # net rpc rights grant testuser10 SeMachineAccountPrivilege
[2005/08/25 02:45:35, 0] param/loadparm.c:map_parameter(2536)
Unknown
Hello everybody,
I'm going to update samba on a production server very soon because i'm
interested by the net rpc commands (especially net rpc rights) but i'm
wondering where the user privileges are stored. I'm currently using an openldap
server to authenticate the users and store their profiles.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] wrote:
Hello everybody,
I'm going to update samba on a production server very soon
because i'm interested by the net rpc commands (especially
net rpc rights) but i'm wondering where the user privileges
are stored. I'm
30 matches
Mail list logo
