Rights Management Capabilities
Samba 3.0.11 introduced support for the Windows privilege model. This model
allows certain rights to be assigned to a user or group SID. In order to enable
this feature,
enable privileges = yes
must be defined in the
global
section of the smb.conf file.
Currently, the rights supported in Samba-3 are listed in
???.
The remainder of this chapter explains how to manage and use these privileges on Samba servers.
Table14.1.Current Privilege Capabilities
Privilege |
Description |
SeMachineAccountPrivilege
|
Add machines to domain
|
SePrintOperatorPrivilege
|
Manage printers
|
SeAddUsersPrivilege
|
Add users and groups to the domain
|
SeRemoteShutdownPrivilege
|
Force shutdown from a remote system
|
SeDiskOperatorPrivilege
|
Manage disk share
|
SeTakeOwnershipPrivilege
|
Take ownership of files or other objects
|
|