[Samba] Samba 3.0 + LDAP

abartlet at samba.org abartlet at samba.org
Tue May 28 22:46:01 GMT 2002


On Wed, May 29, 2002 at 03:27:54PM +1000, Gonzalo Servat wrote:
> On Wed, 2002-05-29 at 15:12, abartlet at samba.org wrote:
> > On Wed, May 29, 2002 at 02:56:09PM +1000, Gonzalo Servat wrote:
> > > On Wed, 2002-05-29 at 14:29, abartlet at samba.org wrote:
> > > Ah, right. So even if I do 'admin users = @domadm' I still need to
> > > create a 'root' user in the ldap tree?
> > 
> > No, you should be able to get away without 'root'.  But this is in Samba 3.0
> > ONLY.
> 
> Ok. so have you got any ideas as to why I get "Access is Denied" ? I'm
> trying to join the domain using 'smbadmin' who is a member of the
> 'domadm' group (now set as 'admin users = @domadm' in smb.conf as well
> as in smbgroupedit for Domain Admins -> domadm)
> 
> You don't need to create the computer account before joining the domain,
> right?

Samba's error reporting could do with some work...  A lot of work actually.

Any error is reported as ACCESS_DENIED in this code, so it could be almost
anything.

Andrew Bartlett





More information about the samba mailing list