[Samba] Should User Manager for Domains work as non-root Domain Admin?

[Buchan Milne]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I have a test network that I have been running samba3 on for a while
(currently 3.0.1pre3) as a Domain Controller on LDAP backend, and I was
under the impression that the User Manager for Domains (from the tools
for NT4) should work as a non-root Domain Admin, but it doesn't.

I seem to have a correct setup, members of my Domain Admin group can
join machines to the domain, and have admin rights on domain members (ie
can create local users etc). If I log in as root on a domain member, I
can use User Manager for Domains to view and change the properties of
users and groups.

However, I can't as a non-root Domain Admin view the properties of a
group or user in User Manager for Domains, or make any changes. If I
double-click a user, I get a "permission denied"-type message.

Now, I have in the past made logs of this, but I don't know if it's
worthwhile debugging or posting a bug if it's not currently intended to
work. Everything else (automatic machine account creation, group mapping
etc etc) seems to work fine, so I don't see that it can be a
configuration problem (unless I missed some documentation ..).

Regards,
Buchan

P.S. I am subscribed in digest, so CC's will reach me faster.

- --
|--------------Another happy Mandrake Club member--------------|
Buchan Milne                Mechanical Engineer, Network Manager
Cellphone * Work            +27 82 472 2231 * +27 21 8828820x202
Stellenbosch Automotive Engineering         http://www.cae.co.za
GPG Key                   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/w4v2rJK6UGDSBKcRAjgjAKCAsD+lgsJdC+ir0eMCj0O275eNdQCgrexr
HFMTklcl6jyesGEWYZmxTEc=
=gVSO
-----END PGP SIGNATURE-----