Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: Allen on September 18, 2003, 01:59:41 AM

Title: Giving certain user full admin rights.
Post by: Allen on September 18, 2003, 01:59:41 AM

I did a search and found a question about setting up Samba rights to the admin user to see other shares.

My question is similar:

User jdoe - I want this user to be able to see, read, and write to everyone elses personal shared folder. That way he can adminstrate the folders. I am running the 5.6U4 server not as a PDC though. Is there a way to do this?

Title: Re: Giving certain user full admin rights.
Post by: Gene Cooper on September 18, 2003, 05:35:46 AM

I believe there is a smb.conf entry for 'admin users =' or something like that.  IIRC, I have seen info on this list about it as well.  Try a different search term, maybe?

G

Title: Re: Giving certain user full admin rights.
Post by: Allen on September 18, 2003, 07:40:44 PM

I've been poking around the smb.conf file..haven't found what I'm looking for though. There is an admin group. But I'm not running my SME as a PDC so not sure if that will help/hurt me.

Trying to search some more but coming up dry :(

~Allen

Title: Re: Giving certain user full admin rights.
Post by: dave on September 18, 2003, 09:16:43 PM

Allen,

Checkout samba.org, they have some very good documentation including the online text from a fairly new book on the topic:
http://us1.samba.org/samba/docs/using_samba/toc.html

This may provide you with the info you're needing.
Dave

Title: Re: Giving certain user full admin rights.
Post by: Peter Side on September 19, 2003, 08:20:47 PM

Hi Allen,

Try sudo !

sudo ( superuser do ) will enable non root users gaining some root's privileges.  If you want to grant administrative privileges with minimal risk to root this is the way to go.

You have to use visudo ( very important not to edit by hand ) to edit /etc/sudoers It will enable a lock on /etc/sudoers.  Very good to protect against syntax errors...

sudo will registers all commands executed by the users in /var/log/messages

Your sudoers file should look like this

#  sudoers file.
#
#  This file MUST be edited with the visudo command as root
#  see the sudoers man page for the details on how to write a sudoers
file.
#

#  Host alias specification

#  User alias specification
User_Alias PWADMIN=medusa

# Cmnd alias specification
Cmnd_Alias PW=/usr/bin/passwd [A-z]*,!/usr/bin/passwd root

 User privileege specification
root ALL=(ALL)  ALL
PWADMIN ALL=PW

Cheers

Peter Side