Re: [Samba] Only root can use net command, because of permissions of secrets.tdb
- Date: Tue, 30 Oct 2018 13:47:09 +1300
- From: Andrew Bartlett via samba <samba@xxxxxxxxxxxxxxx>
- Subject: Re: [Samba] Only root can use net command, because of permissions of secrets.tdb
On Mon, 2018-10-29 at 16:50 -0700, Deft Developer via samba wrote:
> It seems that I can only run "net ads" commands as sudo, otherwise I get an
> Failed to open /var/lib/samba/private/secrets.tdb
> This is because secrets.tbd has the permissions 700.
> This is the case even for listing users with the machine account:
> net ads user -P
> Is this the normal behavior? Is there a correct way to configure so that
> ordinary users can use net without sudo?
Correct, -P means to read the machine account from secrets.tdb, so this
is a privileged operation and so needs root permissions.
Authentication Developer, Samba Team https://samba.org
Samba Development and Support, Catalyst IT
To unsubscribe from this list go to the following URL and read the