Applicable Only to Versions Earlier than 3.0.11
Administrative tasks on UNIX/Linux systems, such as adding users or groups, requires
root-level privilege. The addition of a Windows client to a Samba domain involves the
addition of a user account for the Windows client.
Many UNIX administrators continue to request that the Samba Team make it possible to add Windows workstations, or
the ability to add, delete, or modify user accounts, without requiring
Such a request violates every understanding of basic UNIX system security.
There is no safe way to provide access on a UNIX/Linux system without providing
root-level privileges. Provision of
root privileges can be done
either by logging on to the Domain as the user
root or by permitting particular users to
use a UNIX account that has a UID=0 in the
/etc/passwd database. Users of such accounts
can use tools like the NT4 Domain User Manager and the NT4 Domain Server Manager to manage user and group
accounts as well as domain member server and client accounts. This level of privilege is also needed to manage