On Tue, 16 Sep 2003, Antoine Jacoutot wrote:
Hi !
Is there the need for a root account when using samba-3.0+ldap ? I'm asking this because I cannot add XP workstations to the domain (I made the registry changes), I get an "access denied". Under NT, there's no problem, it does not even ask for a login/password as long as the workstation account is created in samba. With XP, I use a user account who is also part of the admins group, but as I said, I get an access denied. Any idea ?
Yes. The account you use to add machines has to have uid=0. ie: root.
Is this *really* needed if the machine accounts are stored in LDAP? For writing /etc/passwd you need to be root, but for writing LDAP you usually don't need to be root... You only need to have execute permissions for the machine-add script...
As Andrew said, you have to be domain admin (that means ...-500 as SID), but root??
regards Markus
-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba