Re: [Samba] privileges in 3.11?

2005-02-07 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dmitry Melekhov wrote: | I found a reason. | Problem is that I created tdbsam from smbpasswd | using pdbedit. Now I tried to reproduce this and | here is pdbedit output: | | Processing account root | tdb_update_sam: Failing to store a SAM_ACCOUNT for

Re: [Samba] privileges in 3.11?

2005-02-06 Thread Dmitry Melekhov
Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dmitry Melekhov wrote: | I just checked latest svn with | svn co svn://svnanon.samba.org/samba/branches/SAMBA_3_0_RELEASE | samba-SAMBA_3_0_RELEASE | | And I still have the same problem. | | net -S dm -U root rpc rights

Re: [Samba] privileges in 3.11?

2005-02-04 Thread Dmitry Melekhov
Gerald (Jerry) Carter wrote: Hello! -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dmitry Melekhov wrote: | Certanly, root is member of Domain Admins group :-) well not at least implicitly in the NT_USER_TOKEN (although that might maker things easier if it was). I added root to Domain Admins

Re: [Samba] privileges in 3.11?

2005-02-04 Thread Dmitry Melekhov
Gerald (Jerry) Carter wrote: | /net -S dm -U dm rpc rights grant 'TEST\mail' | SeMachineAccountPrivilege | Password: | Could not connect to server dm This is an error from the net command itself (not related to rpc rights). Have you look at the level 10 debug log from this second failure? Now

Re: [Samba] privileges in 3.11?

2005-02-04 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dmitry Melekhov wrote: | I just checked latest svn with | svn co svn://svnanon.samba.org/samba/branches/SAMBA_3_0_RELEASE | samba-SAMBA_3_0_RELEASE | | And I still have the same problem. | | net -S dm -U root rpc rights grant 'TEST\dm'

[Samba] privileges in 3.11?

2005-02-03 Thread Dmitry Melekhov
Hello! I try to assing privileges in 3.11 and get error. If I try to do this from root: net -S dm -U root rpc rights grant 'TEST\mail' SeMachineAccountPrivilege Password: Failed to grant privileges for TEST\dm (NT_STATUS_ACCESS_DENIED) Or, if I do this from user, which is in Domain Admins group:

Re: [Samba] privileges in 3.11?

2005-02-03 Thread Tilo Lutz
Hi I try to assing privileges in 3.11 and get error. If I try to do this from root: net -S dm -U root rpc rights grant 'TEST\mail' SeMachineAccountPrivilege Password: Failed to grant privileges for TEST\dm (NT_STATUS_ACCESS_DENIED) I use tdbsam... I got the same problem. I use the

Re: [Samba] privileges in 3.11?

2005-02-03 Thread Tilo Lutz
Hi I try to assing privileges in 3.11 and get error. If I try to do this from root: net -S dm -U root rpc rights grant 'TEST\mail' SeMachineAccountPrivilege Password: Failed to grant privileges for TEST\dm (NT_STATUS_ACCESS_DENIED) I use tdbsam... I got the same problem. I

Re: [Samba] privileges in 3.11?

2005-02-03 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dmitry Melekhov wrote: | | I try to assing privileges in 3.11 and get error. | If I try to do this from root: | | net -S dm -U root rpc rights grant 'TEST\mail' | SeMachineAccountPrivilege | Password: | Failed to grant privileges for TEST\dm

Re: [Samba] privileges in 3.11?

2005-02-03 Thread Dmitry Melekhov
Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dmitry Melekhov wrote: | | I try to assing privileges in 3.11 and get error. | If I try to do this from root: | | net -S dm -U root rpc rights grant 'TEST\mail' | SeMachineAccountPrivilege | Password: | Failed to grant

Re: [Samba] privileges in 3.11?

2005-02-03 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dmitry Melekhov wrote: | Certanly, root is member of Domain Admins group :-) well not at least implicitly in the NT_USER_TOKEN (although that might maker things easier if it was). | Anyway, do I understood right that root can do this | with lates code