Re: [Samba] Domain Admins can't modify ldapsam entries

2005-10-19 Thread Michael Gasch
hi, well if i do enable privileges = no and admin users = @myadmins this works intentionally. but jerry is right: there should be no use of uid=0 anymore. greez Günter Gersdorf wrote: Domain Admins are not allowed to modify the ldapsam database via usrmgr. lib/smbldap.c: smbldap_open:

Re: [Samba] Domain Admins can't modify ldapsam entries

2005-10-19 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Eric A. Hall wrote: | On 10/18/2005 9:26 AM, Gerald (Jerry) Carter wrote: | -BEGIN PGP SIGNED MESSAGE- | Hash: SHA1 | | Günter Gersdorf wrote: | | | Domain Admins are not allowed to modify the ldapsam | | database via usrmgr. | |

[Samba] Domain Admins can't modify ldapsam entries

2005-10-18 Thread Günter Gersdorf
Domain Admins are not allowed to modify the ldapsam database via usrmgr. lib/smbldap.c: smbldap_open: cannot access LDAP when not root.. Is this by design? Günter Gersdorf -- Guenter Gersdorf Phone: +49/(0)531/391-7634 Inst. f. Werkzeugmaschinen Fax:

Re: [Samba] Domain Admins can't modify ldapsam entries

2005-10-18 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Günter Gersdorf wrote: | Domain Admins are not allowed to modify the ldapsam | database via usrmgr. | lib/smbldap.c: smbldap_open: cannot access LDAP when not root.. | | Is this by design? Yes. It is by design. You have to assign the

Re: [Samba] Domain Admins can't modify ldapsam entries

2005-10-18 Thread Eric A. Hall
On 10/18/2005 9:26 AM, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Günter Gersdorf wrote: | Domain Admins are not allowed to modify the ldapsam | database via usrmgr. | lib/smbldap.c: smbldap_open: cannot access LDAP when not root.. | | Is this by

Re: [Samba] Domain Admins can't modify ldapsam entries

2005-10-18 Thread Craig White
On Wed, 2005-10-19 at 00:05 -0400, Eric A. Hall wrote: On 10/18/2005 9:26 AM, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Günter Gersdorf wrote: | Domain Admins are not allowed to modify the ldapsam | database via usrmgr. | lib/smbldap.c:

Re: [Samba] Domain Admins can't modify ldapsam entries

2005-10-18 Thread John H Terpstra
On Tuesday 18 October 2005 22:05, Eric A. Hall wrote: On 10/18/2005 9:26 AM, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Günter Gersdorf wrote: | Domain Admins are not allowed to modify the ldapsam | database via usrmgr. | lib/smbldap.c: