Koozali.org: home of the SME Server

Obsolete Releases => SME 7.x Contribs => Topic started by: supersonico on October 17, 2007, 01:18:14 AM

Title: admin rights to join a domain
Post by: supersonico on October 17, 2007, 01:18:14 AM
hi there,

I saw several ways to give domain permissions to normal users, with the user panel it's work so good; But I want to ask if some body knows if is possible to make a "Domain Administrator" user account capable to join a windows machine to the samba domain?

I had a "lost configuration problem" because the co-administrator want to change it`s own permissions to web surf...

If some body knows howto, how or where I can find info, about give administrator access to some irresponsible "format computers" guy that dont't gave me another headache after format an XP PC?
Title: Re: admin rights to join a domain
Post by: Franco on October 17, 2007, 04:43:29 AM
http://wiki.contribs.org/User-Groups
Title: Re: admin rights to join a domain
Post by: cactus on October 17, 2007, 04:31:49 PM
hi there,

I saw several ways to give domain permissions to normal users, with the user panel it's work so good; But I want to ask if some body knows if is possible to make a "Domain Administrator" user account capable to join a windows machine to the samba domain?

I had a "lost configuration problem" because the co-administrator want to change it`s own permissions to web surf...

If some body knows howto, how or where I can find info, about give administrator access to some irresponsible "format computers" guy that dont't gave me another headache after format an XP PC?
My guess is you will need to change the samba configuration for that as by default only the admin is defined as administrator in the smb.conf file:

1. Create the custom templates directory:
Code: [Select]
mkdir -p /etc/e-smith/templates-custom/etc/smb.conf/2. Copy the template fragment into the new location:
Code: [Select]
cp /etc/e-smith/templates/etc/smb.conf/11adminUsers /etc/e-smith/templates-custom/etc/smb.conf/2. Use your favourite editor to change the content to point to your Domain Administrator group defined in the server-manager, e.g. like so:
Code: [Select]
admin users = @admins.domainThe @ sign means that this is a group and not a user.
3. Expand your smb.conf file:
Code: [Select]
expand-template /etc/samba/smb.conf4. Reload samba:
Code: [Select]
service smb restart
Now it should be possible to join computers to the domain using all members of the group you just added. Keep in mind that gives all the user full samba access rights so they are also able to access your Primary ibay using the windows share and modify stuff there...

Edit: corrected command in step 4
Title: Re: admin rights to join a domain
Post by: supersonico on October 17, 2007, 10:25:41 PM
I worked like a charm!!! thanks cactus!!!
 :D :-D :-D :-D :D


I'm gona put it on the http://wiki.contribs.org/User-Groups

Sorry where is the create account for the wiki.
Title: Re: admin rights to join a domain
Post by: raem on October 18, 2007, 05:35:50 AM
supersonico

Quote
...where is the create account for the wiki.

I think the process is to create a bug report in bugzilla, and request edit access to the Wiki.
Someone will add you to the system and you use the same user & password that you use for the forums.
Title: Re: admin rights to join a domain
Post by: cactus on October 18, 2007, 08:08:39 AM
supersonico

I think the process is to create a bug report in bugzilla, and request edit access to the Wiki.
Someone will add you to the system and you use the same user & password that you use for the forums.

All users should have been added automtically... did you already try to login using you forum account? If not, pleas try before reporting a bug.
Title: Re: admin rights to join a domain
Post by: cactus on October 18, 2007, 08:09:11 AM
I worked like a charm!!! thanks cactus!!!
 :D :-D :-D :-D :D
I know... I use it myself as well... :-)
Title: Re: admin rights to join a domain
Post by: supersonico on October 26, 2007, 03:02:21 AM
Ok in the wiki  :) :) :) :) :)

http://wiki.contribs.org/User-Groups

Now working whit the firewall  :hammer: :pint:

SME-Server es la berraquera!!!
Cheers!!!
Title: Re: admin rights to join a domain
Post by: stephen noble on October 26, 2007, 02:43:59 PM
also
http://bugs.contribs.org/show_bug.cgi?id=3495
Title: Re: admin rights to join a domain
Post by: slords on October 26, 2007, 02:48:13 PM
Two things for cactus.

1) If this had been raised as a bug in bugzilla it could have easily been fixed for everyone and been made part of the base.
2) Only those members that are part of the documentation team are able to edit the wiki.
Title: Re: admin rights to join a domain
Post by: slords on October 26, 2007, 02:50:12 PM
For supersonico:

It is great you want to get in and help document things on the wiki.  Unless it is obviously a contrib please raise it as a bug first to see if it might be an easy fix first.  From there we can decide if we will do a fix or just document the behavior.
Title: Re: admin rights to join a domain
Post by: cactus on October 26, 2007, 02:54:16 PM
Two things for cactus.
thanks for your remarks!

1) If this had been raised as a bug in bugzilla it could have easily been fixed for everyone and been made part of the base.
And that is what I did a long time ago already although perhaps much and much broader: bug 2487 (http://bugs.contribs.org/show_bug.cgi?id=2487). :-)
And indeed above suggested solution is not part of it. I will report it to the bugtracker as a dependant of this bug then.
2) Only those members that are part of the documentation team are able to edit the wiki.
Ah, alright, my mistake!
Title: Re: admin rights to join a domain
Post by: cactus on October 26, 2007, 03:01:21 PM
I will report it to the bugtracker as a dependant of this bug then.Ah, alright, my mistake!
Reported as bug 3496 (http://bugs.contribs.org/show_bug.cgi?id=3496): Allow multiple admins to add computers to the domain
Title: Re: admin rights to join a domain
Post by: cactus on October 26, 2007, 03:10:04 PM
Reported as bug 3496 (http://bugs.contribs.org/show_bug.cgi?id=3496): Allow multiple admins to add computers to the domain
And after that noticed that snoble beat me to the bugtracker with bug 3495 (http://bugs.contribs.org/show_bug.cgi?id=3495). :-)