/usr/share/samba/setup/provision_privilege.ldif is in samba4 4.0.0~alpha18.dfsg1-4ubuntu2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 | # default privileges - more can be added via LSA or ldbedit
dn: @ATTRIBUTES
comment: CASE_INSENSITIVE
privilege: CASE_INSENSITIVE
dn: @INDEXLIST
@IDXATTR: objectSid
@IDXATTR: privilege
dn: sid=S-1-5-32-544
objectClass: privilege
comment: Administrators
objectSid: S-1-5-32-544
privilege: SeSecurityPrivilege
privilege: SeBackupPrivilege
privilege: SeRestorePrivilege
privilege: SeSystemtimePrivilege
privilege: SeShutdownPrivilege
privilege: SeRemoteShutdownPrivilege
privilege: SeTakeOwnershipPrivilege
privilege: SeDebugPrivilege
privilege: SeSystemEnvironmentPrivilege
privilege: SeSystemProfilePrivilege
privilege: SeProfileSingleProcessPrivilege
privilege: SeIncreaseBasePriorityPrivilege
privilege: SeLoadDriverPrivilege
privilege: SeCreatePagefilePrivilege
privilege: SeIncreaseQuotaPrivilege
privilege: SeChangeNotifyPrivilege
privilege: SeUndockPrivilege
privilege: SeManageVolumePrivilege
privilege: SeImpersonatePrivilege
privilege: SeCreateGlobalPrivilege
privilege: SeEnableDelegationPrivilege
privilege: SeInteractiveLogonRight
privilege: SeNetworkLogonRight
privilege: SeRemoteInteractiveLogonRight
dn: sid=S-1-5-32-550
objectClass: privilege
comment: Print Operators
objectSid: S-1-5-32-550
privilege: SeLoadDriverPrivilege
privilege: SeShutdownPrivilege
privilege: SeInteractiveLogonRight
dn: sid=S-1-5-32-551
objectClass: privilege
comment: Backup Operators
objectSid: S-1-5-32-551
privilege: SeBackupPrivilege
privilege: SeRestorePrivilege
privilege: SeShutdownPrivilege
privilege: SeInteractiveLogonRight
dn: sid=S-1-5-32-549
objectClass: privilege
comment: Server Operators
objectSid: S-1-5-32-549
privilege: SeBackupPrivilege
privilege: SeSystemtimePrivilege
privilege: SeRemoteShutdownPrivilege
privilege: SeRestorePrivilege
privilege: SeShutdownPrivilege
privilege: SeInteractiveLogonRight
dn: sid=S-1-5-32-548
objectClass: privilege
comment: Account Operators
objectSid: S-1-5-32-548
privilege: SeInteractiveLogonRight
dn: sid=S-1-5-32-554
objectClass: privilege
comment: Pre-Windows 2000 Compatible Access
objectSid: S-1-5-32-554
privilege: SeRemoteInteractiveLogonRight
privilege: SeChangeNotifyPrivilege
|