diff options
| author | Gerald Carter <jerry@samba.org> | 2005-01-21 20:28:01 +0000 |
|---|---|---|
| committer | Gerald W. Carter <jerry@samba.org> | 2008-04-23 08:46:11 -0500 |
| commit | 3be3a2ab0b7285104984b0c4e1d673d795a1ca73 (patch) | |
| tree | 49d0a083c5c2a7a3819ced5bcd85b6b851a8fa4b /docs | |
| parent | 6bcff1ae743ec90467053579ff1931280b530a32 (diff) | |
| download | samba-3be3a2ab0b7285104984b0c4e1d673d795a1ca73.tar.gz samba-3be3a2ab0b7285104984b0c4e1d673d795a1ca73.tar.bz2 samba-3be3a2ab0b7285104984b0c4e1d673d795a1ca73.zip | |
add entry for 'enable privileges'
(This used to be commit 726c203807336d851320d392c19ba75b42585df1)
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/smbdotconf/logon/enableprivileges.xml | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/docs/smbdotconf/logon/enableprivileges.xml b/docs/smbdotconf/logon/enableprivileges.xml new file mode 100644 index 0000000000..e37caaf51e --- /dev/null +++ b/docs/smbdotconf/logon/enableprivileges.xml @@ -0,0 +1,24 @@ +<samba:parameter name="enable privileges" + context="G" + type="boolean" + advanced="1" developer="1" + xmlns:samba="http://samba.org/common"> +<description> + <para>This parameter controls whether or not smbd will honor + privileges assigned to specific SIDs via either <command>net rpc rights</command> + or one of the Windows user and group manager tools. This parameter is + disabled by default to prevent members of the Domain Admins group from + being able to assign privileges to user which can then result in certain + smbd operations running as root that would normally run under the context + of the connected user. </para> + + <para>An example of how privileges can be used is to assign + the right to join clients to a Samba controller domain without + providing root access to the server via smbd.</para> + + <para>Please read the extended description provided in the + Samba documentation before enabling this option.</para> + +</description> +<value type="default">no</value> +</samba:parameter> |