[Samba] Re: Domain Admins can't modify ldapsam entries

[Günter Gersdorf]

Gerald (Jerry) Carter schrieb:
> Günter Gersdorf wrote:
> 
> | Domain Admins are not allowed to modify the ldapsam
> | database via usrmgr.
> |   lib/smbldap.c: smbldap_open: cannot access LDAP when not root..
> |
> | Is this by design?
> 
> Yes.  It is by design.  You have to assign the
> SeAddUsersPrivilege  to the Domain Admins group.
Sorry, should have read the manual!

Günter Gersdorf
-- 
Guenter Gersdorf                         Phone:      +49/(0)531/391-7634
Inst. f. Werkzeugmaschinen               Fax:                      -5842
und Fertigungstechnik, TU Braunschweig   E-Mail:     G.Gersdorf at tu-bs.de
Langer Kamp 19b, D-38106 Braunschweig    http://www.iwf.ing.tu-bs.de/