[Samba] Join Machine to Domain

[manuel.piessnegger at straumann.com]

Hello,

Is it really possible that just the user root with the samba password can
join workstations into the domain?
I have also some other users who are domain administrator, but with this
users i can't join any workstations into the domain.
This is mor me a important security point, because I want to give some
people the acces right to join workstations into domain and only this
function. Also if the user root is just a domain user in samba you have no
rights to change something on a client, but when I start p.e. the user
manager it's possible to change users passwords and that isn't nice.

I use the following test enviroment:
OS: Linux
Samba 3 with backend ldapsam
OpenLdap 2.1

Regards


Manuel Piessnegger