John H Terpstra wrote:
On Tue, 16 Sep 2003, Antoine Jacoutot wrote:


Hi !

Is there the need for a root account when using samba-3.0+ldap ?
I'm asking this because I cannot add XP workstations to the domain (I
made the registry changes), I get an "access denied". Under NT, there's
no problem, it does not even ask for a login/password as long as the
workstation account is created in samba. With XP, I use a user account
who is also part of the admins group, but as I said, I get an access denied.
Any idea ?


Yes. The account you use to add machines has to have uid=0. ie: root.

Is this *really* needed if the machine accounts are stored in LDAP? For writing /etc/passwd you need to be root, but for writing LDAP you usually don't need to be root... You only need to have execute permissions for the machine-add script...

As Andrew said, you have to be domain admin (that means ...-500 as SID),
but root??

regards Markus

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Reply via email to