Bug 3233 - usrmgr keeps user in domain admins group
Summary: usrmgr keeps user in domain admins group
Alias: None
Product: Samba 3.0
Classification: Unclassified
Component: Domain Control (show other bugs)
Version: 3.0.20a
Hardware: All Windows XP
: P3 normal
Target Milestone: none
Assignee: Samba Bugzilla Account
QA Contact: Samba QA Contact
Depends on:
Reported: 2005-11-02 06:19 UTC by Robert Schetterer
Modified: 2005-11-02 15:04 UTC (History)
0 users

See Also:


Note You need to log in before you can comment on or make changes to this bug.
Description Robert Schetterer 2005-11-02 06:19:01 UTC
i have discovered following problem.
System suse 9.2 pdc samba  3.0.20b  ldap.
a system user which was in the group Domain Admins ( as secondary group of
course ) , cannot be removed from the group, by usrmgr ( in real ldap the user
gets deleted ! )
If the user account gets deleted completly and recreated it is shown again in
the domain admins group.( which isnt so in ldap )
This seems to me as bug with usrmgr, which seem not to forget having a user in
Domain Admins Group. ( guessing about some caching? )
restarting smb nmb does not fix this.
There is no failure of function if i browse the delete and add accts with a ldap
Comment 1 Robert Schetterer 2005-11-02 15:04:03 UTC
Hi @ll,
the problem is linked to the david software specially to the david admin
david admin puts some reg key to the windows client which is used
to view the david services from the windows client on the smb server.
This is done via ssh, so here seems to be the problem when the user changes out
from the domain admins group, cause the ssh connect is still
done by the old ssh account, so there are two connects to the smb pdc ( smb, ssh
) with differnet accounts.
This seems to force usrmgr to show the user staying in the domain admins group ,
while this isnt true in ldap anymore.
After fixing the reg key to the right user account , showing of david services
in the david admin works again , and usrmgr shows the right
group entries again ( a reboot was done too ), so the failure went away.
I am not 100 % sure about this fix but the failure was solved.
Best Regards