Bug 7795 - filesystem root access when "admin users" set to one user instead of group
Summary: filesystem root access when "admin users" set to one user instead of group
Status: NEW
Alias: None
Product: Samba 3.4
Classification: Unclassified
Component: Config Files (show other bugs)
Version: 3.4.8
Hardware: Other Linux
: P3 normal
Target Milestone: ---
Assignee: Jeremy Allison
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-11-15 16:37 UTC by Daggett
Modified: 2010-11-24 11:29 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Daggett 2010-11-15 16:37:19 UTC
Hi all,

I have this setup :
- samba 3.4.8 32bits running on a Mandriva Linux 2010.0
- accounts and groups are in LDAP

I needed to have the "administrateur" user to be domain administrator.
So I added the options :
admin users = administrateur
in smb.conf inside the [global] section.

My users are able to login on domain members WindowsXP machines.
But they are all recognised by Samba as root users : created files or directories have owner root and users have access to every files on shares, because they are all root.

I changed the configuration parameter to a group instead of a user:
admin users = @administrateurs
Restarted Samba.
My users are now all normal users, and the members of "administrateurs" group have all root access to shares.
So it works correctly with a group.


Samba's documentation says that the "admin users" parameter can be set to either users and groups.


Dag