[Samba] Interacting with LDAP db without password as root

[Rowland penny]

On 15/07/2020 16:38, RhineDevil wrote:
> Wed, 15 Jul 2020 16:18:32 +0100 Rowland penny via samba <samba at lists.samba.org>:
>
>
>> Is Samba running ?
>>
>> Rowland
>>
> Yes it is

I ask this because the only time I get anything like your problem is if 
I stop Samba:

linuxadmin at dc1:~$ sudo service samba-ad-dc stop
[sudo] password for linuxadmin:
[ ok ] Stopping Samba AD DC daemon: samba.
linuxadmin at dc1:~$ sudo ldbsearch -P -H 
ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldapi
Failed to bind - LDAP client internal error: NT_STATUS_UNSUCCESSFUL
Failed to connect to 'ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldapi' 
with backend 'ldapi': LDAP client internal error: NT_STATUS_UNSUCCESSFUL
Failed to connect to ldapi://%2Fvar%2Flib%2Fsamba%2Fprivate%2Fldapi - 
LDAP client internal error: NT_STATUS_UNSUCCESSFUL

So if Samba is running, then is Apparmor denying access ? (I always turn 
Apparmor off)

Rowland