On Tue, Jan 19, 2016 at 08:43:40PM -0000, Henry McLaughlin wrote:
I have sssd configured and working with my domain member server and I
now wish to grant the SeDiskOperatorPrivilege to the "MYDOMAIN\Domain Admins"
group. When I execute the command it appears to disregard the domain name and grant the
privileges to the group "Unix Group\domain admins"
I'll try to reproduce this and see why it happens. I'll come back to you
when I have some results.
bye,
Sumit
>
> net rpc rights list accounts -U'MYDOMAIN\administrator'
> Enter MYDOMAIN\administrator's password:
>
> ...
> Unix Group\domain admins
> No privileges assigned
>
> net rpc rights grant 'MYDOMAIN\Domain Admins' SeDiskOperatorPrivilege
-U'MYDOMAIN\administrator'
> Enter MYDOMAIN\administrator's password:
> Successfully granted rights.
>
> net rpc rights list accounts -U'MYDOMAIN\administrator'
> Enter MYDOMAIN\administrator's password:
>
> ...
> Unix Group\domain admins
> SeDiskOperatorPrivilege
>
> net rpc rights revoke 'MYDOMAIN\Domain Admins' SeDiskOperatorPrivilege
-U'MYDOMAIN\administrator'
> Enter MYDOMAIN\administrator's password:
> Successfully revoked rights.
>
> net rpc rights list accounts -U'MYDOMAIN\administrator'
> Enter MYDOMAIN\administrator's password:
>
> ...
> Unix Group\domain admins
> No privileges assigned
>
> Below I have completely removed the domain name from the command and still get the
same outcome.
>
> net rpc rights grant 'Domain Admins' SeDiskOperatorPrivilege
-U'MYDOMAIN\administrator'
> Enter MYDOMAIN\administrator's password:
> Successfully granted rights.
>
> net rpc rights list accounts -U'MYDOMAIN\administrator'
> Enter MYDOMAIN\administrator's password:
>
> ...
> Unix Group\domain admins
> SeDiskOperatorPrivilege
> _______________________________________________
> sssd-users mailing list
> sssd-users(a)lists.fedorahosted.org
>
https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahosted.org