[Samba] Domain Admins can't modify ldapsam entries

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Günter Gersdorf wrote:

| Domain Admins are not allowed to modify the ldapsam
| database via usrmgr.
|   lib/smbldap.c: smbldap_open: cannot access LDAP when not root..
|
| Is this by design?

Yes.  It is by design.  You have to assign the
SeAddUsersPrivilege  to the Domain Admins group.







cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDVPgRIR7qMdg1EfYRAtCyAJ9Ja8CU4/clwoiemo0SShaHBMCKWQCg08wb
zKcxIVuCeDyPfC4vbKM/QuM=
=y+Jz
-----END PGP SIGNATURE-----