[Samba] bind - samba_dlz - insufficient access rights

[Robert Moskowitz]

Rebuilt my server to test that I 'knew' how to build it, and to do it on 
the net where it will run.  Took some effort to get permissions to 
/var/lib/samba/private/dns/sam.ldb right, and I probably overkilled.  
But got past that to see:

Sep 10 16:21:14 homebase.home.htt named[2698]: samba_dlz: ldb: module 
descriptor initialization failed : insufficient access rights
Sep 10 16:21:14 homebase.home.htt named[2698]: samba_dlz: ldb: module 
objectclass initialization failed : insufficient access rights
Sep 10 16:21:14 homebase.home.htt named[2698]: samba_dlz: ldb: module 
asq initialization failed : insufficient access rights
Sep 10 16:21:14 homebase.home.htt named[2698]: samba_dlz: ldb: module 
server_sort initialization failed : insufficient access rights
Sep 10 16:21:14 homebase.home.htt named[2698]: samba_dlz: ldb: module 
paged_results initialization failed : insufficient access rights
Sep 10 16:21:14 homebase.home.htt named[2698]: samba_dlz: ldb: module 
dirsync initialization failed : insufficient access rights
Sep 10 16:21:14 homebase.home.htt named[2698]: samba_dlz: ldb: module 
schema_load initialization failed : insufficient access rights
Sep 10 16:21:14 homebase.home.htt systemd[1]: named.service: control 
process exited, code=exited status=1
Sep 10 16:21:14 homebase.home.htt systemd[1]: Failed to start Berkeley 
Internet Name Domain (DNS).

so now what am I missing?