Bug 6552 - Members of "Domain Admins" don't have the same rights as the user "Administrator"
Summary: Members of "Domain Admins" don't have the same rights as the user "Administra...
Status: RESOLVED DUPLICATE of bug 6199
Alias: None
Product: Samba 4.0
Classification: Unclassified
Component: AD: LDB/DSDB/SAMDB (show other bugs)
Version: unspecified
Hardware: All All
: P3 normal (vote)
Target Milestone: ---
Assignee: Andrew Bartlett
QA Contact: Matthias Dieter Wallnöfer
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-07-15 05:37 UTC by Matthias Dieter Wallnöfer
Modified: 2009-07-15 07:30 UTC (History)
0 users

See Also:


Attachments
Logfile of SAMBA (454.07 KB, text/plain)
2009-07-15 05:44 UTC, Matthias Dieter Wallnöfer
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Matthias Dieter Wallnöfer 2009-07-15 05:37:56 UTC
The group members of the "Domain Admins" group don't seem to have the same rights as the user "Administrator".
Comment 1 Matthias Dieter Wallnöfer 2009-07-15 05:44:17 UTC
Created attachment 4424 [details]
Logfile of SAMBA

I discovered this when I added a new user, assigned it to the "Domain Admins" group and tried to add his user account to the "Cert Publishers" group (only for testing) with him as logged in user.
Comment 2 Matthias Dieter Wallnöfer 2009-07-15 05:49:43 UTC
And I think I've also just found the cause: Only "builtin administrators" are seen as administrators (consider security_token.c:159 "security_session_user_level").
Comment 3 Matthias Dieter Wallnöfer 2009-07-15 07:30:21 UTC
I forgot that we had this bug in #6199.

*** This bug has been marked as a duplicate of bug 6199 ***