[Samba] Domain Admins can't modify ldapsam entries

Michael Gasch gasch at eva.mpg.de
Wed Oct 19 06:33:36 GMT 2005


well if i do "enable privileges = no" and "admin users = @myadmins" this 
works intentionally. but jerry is right: there should be no use of uid=0 


Günter Gersdorf wrote:
> Domain Admins are not allowed to modify the ldapsam database via usrmgr.
>   lib/smbldap.c: smbldap_open: cannot access LDAP when not root..
> Is this by design?
> Günter Gersdorf

Michael Gasch
Max Planck Institute for Evolutionary Anthropology
Department of Human Evolution (IT)
Deutscher Platz 6
D-04103 Leipzig

Phone: 49 (0)341 - 3550 137

More information about the samba mailing list