Re: Windows domain user in Linux
On Sat, May 5, 2012 at 1:50 AM, Camaleón <noelamac@gmail.com> wrote:
> On Fri, 04 May 2012 21:06:58 +0500, Muhammad Yousuf Khan wrote:
>
>> On Fri, May 4, 2012 at 8:10 PM, Camaleón <noelamac@gmail.com> wrote:
>>> On Fri, 04 May 2012 12:32:31 +0500, Muhammad Yousuf Khan wrote:
>>>
>>>> i am using winbind for samba to fetch users from windows domain. now i
>>>> want to add a windows domain user "administrator" a member of group
>>>> "root". however when i run the command it gives me an error.
>>>>
>>>> #useradd -G root administrator
>>>> useradd: user 'administrator' already exists
>>>
>>> Is the user already in an external database?
>>>
>>> >From "man adduser":
>>>
>>> ***
>>> CAVEATS
>>> You may not add a user to a NIS or LDAP group. This must be performed
>>> on the corresponding server.
>>>
>>> Similarly, if the username already exists in an external user database
>>> such as NIS or LDAP, useradd will deny the user account creation
>>> request. ***
>>>
>>> In addition, if the user "administrator" already exists locally, you
>>> have to use "usermod" instead.
>>>
>>> Note: adding a user to the root's group can be dangerous.
>>
>>
>> Thanks for the informative email, however administrator is me so thats
>> the reason i added that.
>
> Yes, but that's still dangerous. Why do you need to be in root's group?
>
Because, there are few folders stored on samba storage where me as a
administrator need to write files very often.
so it seems easy to me that i have to just chmode 770 to the
folder/file and things starts working accordingly.
by the way , what kind of security consequences you are talking about?
note : i am using this only for samba share
>> Thanks any ways,
>
> You're welcome.
>
> Anyway, a quick note on your first one-liner: by re-reading "man useradd"
> I think you should use "-g" instead "-G".
>
> Greetings,
>
> --
> Camaleón
>
>
> --
> To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> Archive: [🔎] jo1fe4$3du$17@dough.gmane.org">http://lists.debian.org/[🔎] jo1fe4$3du$17@dough.gmane.org
>
Reply to: