[Samba] Embedding a "Domain Group" in "Domain Administrators" ???

[Michael Gasch]

hi list,

is it possible with samba v3 and ldap backend to embedd a normal group 
like "normalgroup" in the group "Domain Administrators" to give members 
of the group "normalgroup" full administrative rights on workstations?

i tried with "net groupmap addmem sid-of-normalgroup 
sid-of-domain-admins" and "net groupmap addmem sid-of-domain-admins 
sid-of-normalgroup", which adds two sidlistattributes in my ldap backend 
in the corresponding group. but when i login to the domain with a member 
of "normalgroup" i don't have administrative privileges on the 
workstation. is that by design or not implemented yet?

thanks in advance!

-- 
Michael Gasch
Max Planck Institute for Evolutionary Anthropology
Department of Human Evolution (IT)
Deutscher Platz 6
D-04103 Leipzig
Germany

Phone: 49 (0)341 - 3550 137