Adding users with usrmgr.exe

[Michael Glauche]

Hi,
  there's a problem adding users to samba with usrmgr when using a
non-root login:
api_rpc_command: api_samr_rpc op 0x25 - api_rpc_command: SAMR_SET_USERINFO2
000008 samr_io_q_set_userinfo2
prs_grow_data: 452 > 449
samr_reply_set_userinfo2: 2197
Found policy hnd[22] [000] 00 00 00 00 00 A3 5B 80  55 B5 BF 01 44 33 00 00
......[. U...D3..
[010] 14 00 00 00                                       ....
policy(pnum=22 ): Getting policy state
Getting policy sid=S-1-5-21-875121446-1962601162-102799029-1000
samr_reply_set_userinfo2: rid:0x3e8
startfileent: unable to open file /opt/samba-tng/private/smbpasswd
unable to open sam password database.
000000 samr_io_r_set_userinfo2
create_noauth_reply: data_start: 0 data_end: 4 max_tsize: 5680

The user is in the Domain Admin group, but smbpasswd is only readable by user
root, noone else.
Could something like:
if (user is in group "domain admin")
   suid 0
work ?

regards,
   Michael