From 3be3a2ab0b7285104984b0c4e1d673d795a1ca73 Mon Sep 17 00:00:00 2001 From: Gerald Carter Date: Fri, 21 Jan 2005 20:28:01 +0000 Subject: [PATCH] add entry for 'enable privileges' (This used to be commit 726c203807336d851320d392c19ba75b42585df1) --- docs/smbdotconf/logon/enableprivileges.xml | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 docs/smbdotconf/logon/enableprivileges.xml diff --git a/docs/smbdotconf/logon/enableprivileges.xml b/docs/smbdotconf/logon/enableprivileges.xml new file mode 100644 index 00000000000..e37caaf51e2 --- /dev/null +++ b/docs/smbdotconf/logon/enableprivileges.xml @@ -0,0 +1,24 @@ + + + This parameter controls whether or not smbd will honor + privileges assigned to specific SIDs via either net rpc rights + or one of the Windows user and group manager tools. This parameter is + disabled by default to prevent members of the Domain Admins group from + being able to assign privileges to user which can then result in certain + smbd operations running as root that would normally run under the context + of the connected user. + + An example of how privileges can be used is to assign + the right to join clients to a Samba controller domain without + providing root access to the server via smbd. + + Please read the extended description provided in the + Samba documentation before enabling this option. + + +no + -- 2.11.4.GIT