[awsedit]

I found something online about Samba’s PDC implementation not allowing computers to be added to the domain?

On the surface, this appears to make sense. I also know that editing the smb.conf file is tricky since the UI rewrites is constantly.

Could this be a solution? And if so, what is the best way to modify the file? I saw a posting the under Leo Server, there is a separate SMB.CONF file that is avail for user modification that lives separately from the main one in the /run directory? I’m on 10.4.11 however…

Please advise.

—-

The solution:

add this to smb.conf:

enable privileges = yes

This allows you to grant special privileges to users (see man smb.conf
for more detail)

reload the samba config:

$ smbcontrol smbd reload-config

and grant the necessary rights to Administrator:

$ net -U Administrator rpc rights list
SeMachineAccountPrivilege Add machines to domain
SePrintOperatorPrivilege Manage printers
SeAddUsersPrivilege Add users and groups to the domain
SeRemoteShutdownPrivilege Force shutdown from a remote system
SeDiskOperatorPrivilege Manage disk shares

$ net -U Administrator rpc rights list Administrator

$ net -U Administrator rpc rights grant Administrator SeMachineAccountPrivilege
Successfully granted rights.

Now one can add machines to the domain. Better yet, the
administrator account does _not_ have to have a uid of 0!

[Author]

Posts