[Samba] Samba as a PDC with LDAP and Kerberos

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ti Leggett wrote:

| Unfortunately this still doesn't work. As a note,
| I thought about this and had added the root account
| to the Domain Admins group.
|
|>>However the following fails:
|>>
|>>net -S localhost rpc rights grant "CI\Domain Admins"
|>>SeMachineAccountPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege
|>>SeDiskOperatorPrivilege SeRemoteShutdownPrivilege
|>>
|>>Reading through the logs, everything appears to be fine until it goes to
|>>assign privileges. Here's a snip from the logs (log level = 10):
|>>
|>>
|>
|><snip>
|>
|>>[2005/05/02 12:09:43, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
|>>     0000 status: NT_STATUS_ACCESS_DENIED
|>>
|>>The LDAP logs show everything successful and there's
|>>no MODs trying to occur.

Can you send me a level 10 debug log?  I'll take a look.
Also include the version fo Samba you are using (since I'm
picking up on this thread late in the game).





cheers, jerry
=====================================================================
Alleviating the pain of Windows(tm)      ------- http://www.samba.org
GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
"I never saved anything for the swim back."     Ethan Hawk in Gattaca
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCf4YFIR7qMdg1EfYRAuX1AKCi1zd4iwWaXIZ8Q5qe0ffbuBWAegCgxzmO
loXKDcVidB/AzofwWAyMypI=
=fZLa
-----END PGP SIGNATURE-----