主页 / ubuntu / 问题 / 1092958
Accepted
Little Mitch
Asked: 2018-11-15 10:57:43 +0800 CST

Samba 网络 rpc 权限授予 SeDiskOperatorPrivilege 失败

  • 772

Ubuntu 服务器 18.04

安装/配置的 Samba

成功加入域

可以浏览服务器并查看“打印机共享”——从 Windows PC >net view \servername 列出打印机共享

通过 kinit、klist 确认 Kerberos 功能

服务器名称列在 Active Directory 用户和计算机中。

:/$ net rpc rights grant "DOMAIN\Domain Admins" SeDiskOperatorPrivilege -U 
"DOMAIN\administrator"
Enter DOMAIN\administrator's password:
Bad SMB2 signature for message
[0000] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
[0000] D8 29 57 39 05 18 72 BE   62 9E 74 58 90 88 FF 57   .)W9..r. b.tX...W
Could not connect to server 127.0.0.1
Connection failed: NT_STATUS_ACCESS_DENIED

smb.conf：

[global]
dns forwarder = my.DNS.ip.address
dns proxy = No
log file = /var/log/samba/log.%m
logging = syslog@1 /var/log/samba/log.%m
map to guest = Bad User
max log size = 1000
panic action = /usr/share/samba/panic-action %d
realm = DOMAIN.COM
security = ADS
server role = member server
server string = %h server (Samba, Ubuntu)
template shell = /bin/bash
usershare allow guests = Yes
winbind enum groups = Yes
winbind enum users = Yes
winbind nss info = rfc2307
winbind use default domain = Yes
workgroup = DOMAIN
idmap config DOMAIN : range = 50000-1000000
idmap config DOMAIN : backend = ad
idmap config * : range = 3000-7999
idmap config * : backend = tbd
map acl inherit = Yes
store dos attributes = Yes
vfs objects = acl_xattr

[printers]
browseable = No
comment = All Printers
create mask = 0700
path = /var/spool/samba
printable = Yes

[print$]
comment = Printer Drivers
path = /var/lib/samba/printers
server permissions samba 18.04

1 个回答

  1. Best Answer

    有点尴尬，因为我一整天都在处理这个问题。最后让步并在这里发布，然后找到了解决方案：

    需要创建用户映射文件：例如/etc/samba/user.map

    !root = SAMDOM\Administrator SAMDOM\administrator

    将此添加到 smb.conf 的 [global] 部分

    username map = /etc/samba/user.map

    重新启动 smbd 就可以了。

    • 0

相关问题