Topic: admin rights to join a domain

[supersonico]

hi there,

I saw several ways to give domain permissions to normal users, with the user panel it's work so good; But I want to ask if some body knows if is possible to make a "Domain Administrator" user account capable to join a windows machine to the samba domain?

I had a "lost configuration problem" because the co-administrator want to change it`s own permissions to web surf...

If some body knows howto, how or where I can find info, about give administrator access to some irresponsible "format computers" guy that dont't gave me another headache after format an XP PC?

[Franco]

http://wiki.contribs.org/User-Groups

[cactus]

hi there,

I saw several ways to give domain permissions to normal users, with the user panel it's work so good; But I want to ask if some body knows if is possible to make a "Domain Administrator" user account capable to join a windows machine to the samba domain?

I had a "lost configuration problem" because the co-administrator want to change it`s own permissions to web surf...

If some body knows howto, how or where I can find info, about give administrator access to some irresponsible "format computers" guy that dont't gave me another headache after format an XP PC?

My guess is you will need to change the samba configuration for that as by default only the admin is defined as administrator in the smb.conf file:

1. Create the custom templates directory:

Code: [Select]

mkdir -p /etc/e-smith/templates-custom/etc/smb.conf/2. Copy the template fragment into the new location:

Code: [Select]

cp /etc/e-smith/templates/etc/smb.conf/11adminUsers /etc/e-smith/templates-custom/etc/smb.conf/2. Use your favourite editor to change the content to point to your Domain Administrator group defined in the server-manager, e.g. like so:

Code: [Select]

admin users = @admins.domainThe @ sign means that this is a group and not a user.
3. Expand your smb.conf file:

Code: [Select]

expand-template /etc/samba/smb.conf4. Reload samba:

Code: [Select]

service smb restart
Now it should be possible to join computers to the domain using all members of the group you just added. Keep in mind that gives all the user full samba access rights so they are also able to access your Primary ibay using the windows share and modify stuff there...

Edit: corrected command in step 4

[supersonico]

I worked like a charm!!! thanks cactus!!!
 


I'm gona put it on the http://wiki.contribs.org/User-Groups

Sorry where is the create account for the wiki.

[raem]

supersonico

...where is the create account for the wiki.

I think the process is to create a bug report in bugzilla, and request edit access to the Wiki.
Someone will add you to the system and you use the same user & password that you use for the forums.

[cactus]

supersonico

I think the process is to create a bug report in bugzilla, and request edit access to the Wiki.
Someone will add you to the system and you use the same user & password that you use for the forums.

All users should have been added automtically... did you already try to login using you forum account? If not, pleas try before reporting a bug.

[cactus]

I worked like a charm!!! thanks cactus!!!
 

I know... I use it myself as well...

[supersonico]

Ok in the wiki 

http://wiki.contribs.org/User-Groups

Now working whit the firewall 

SME-Server es la berraquera!!!
Cheers!!!

[stephen noble]

also
http://bugs.contribs.org/show_bug.cgi?id=3495

[slords]

Two things for cactus.

1) If this had been raised as a bug in bugzilla it could have easily been fixed for everyone and been made part of the base.
2) Only those members that are part of the documentation team are able to edit the wiki.

[slords]

For supersonico:

It is great you want to get in and help document things on the wiki.  Unless it is obviously a contrib please raise it as a bug first to see if it might be an easy fix first.  From there we can decide if we will do a fix or just document the behavior.

[cactus]

Two things for cactus.

thanks for your remarks!

1) If this had been raised as a bug in bugzilla it could have easily been fixed for everyone and been made part of the base.

And that is what I did a long time ago already although perhaps much and much broader: bug 2487.
And indeed above suggested solution is not part of it. I will report it to the bugtracker as a dependant of this bug then.

2) Only those members that are part of the documentation team are able to edit the wiki.

Ah, alright, my mistake!

[cactus]

I will report it to the bugtracker as a dependant of this bug then.Ah, alright, my mistake!

Reported as bug 3496: Allow multiple admins to add computers to the domain

[cactus]

Reported as bug 3496: Allow multiple admins to add computers to the domain

And after that noticed that snoble beat me to the bugtracker with bug 3495.