source: branches/samba-3.3.x/docs-xml/smbdotconf/logon/enableprivileges.xml

Last change on this file was 217, checked in by Herwig Bauernfeind, 16 years ago

Import Samba 3.3 branch at 3.3.0 level docs-xml (psmedley's port)

File size: 1.0 KB
Line 
1<samba:parameter name="enable privileges"
2 context="G"
3 type="boolean"
4 advanced="1" developer="1"
5 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
6<description>
7 <para>
8 This parameter controls whether or not smbd will honor privileges assigned to specific SIDs via either
9 <command>net rpc rights</command> or one of the Windows user and group manager tools. This parameter is
10 enabled by default. It can be disabled to prevent members of the Domain Admins group from being able to
11 assign privileges to users or groups which can then result in certain smbd operations running as root that
12 would normally run under the context of the connected user.
13 </para>
14
15 <para>
16 An example of how privileges can be used is to assign the right to join clients to a Samba controlled
17 domain without providing root access to the server via smbd.
18 </para>
19
20 <para>
21 Please read the extended description provided in the Samba HOWTO documentation.
22 </para>
23
24</description>
25<value type="default">yes</value>
26</samba:parameter>
Note: See TracBrowser for help on using the repository browser.