samba - Dec 2005 - ADS joined, can't manage shares from MMC

I have a samba 3.0.14 server attached to a 2003 ADS server. (verified
with: wbinfo -u/-g, getent passwd/group, net ads testjoin)

And i can attach to the Samba server using an XP workstation's MMC,
but when i attempt to change ACL's (share perms or security tab) i get
a warning window popup stating, "Changes cannot be saved. Access is
denied"

I am logged into the AD/DC as Administrator and have a username map
file declared in the smb.conf that equates root to administrator,
admin and the directory that the share represents is owned by root.

Here are the last set of lines from the smb log:
id=10000, gid=10000) (pid 32663)
[2005/12/30 06:32:42, 0] rpc_server/srv_pipe.c:api_pipe_bind_req(993)
  api_pipe_bind_req: unknown auth type 9 requested.
[2005/12/30 06:32:54, 1] smbd/service.c:close_cnum(830)
  server01 (192.168.0.7) closed connection to service ftp
[2005/12/30 06:33:37, 0] rpc_server/srv_pipe.c:api_pipe_bind_req(993)
  api_pipe_bind_req: unknown auth type 9 requested.
[2005/12/30 06:34:43, 0] rpc_server/srv_pipe.c:api_pipe_bind_req(993)
  api_pipe_bind_req: unknown auth type 9 requested.

Can someone shed some light on these log entries or how to solve the problem?

-Thx

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Mike Partyka wrote:
> I have a samba 3.0.14 server attached to a 2003 ADS server. (verified
> with: wbinfo -u/-g, getent passwd/group, net ads testjoin)
> 
> And i can attach to the Samba server using an XP workstation's MMC,
> but when i attempt to change ACL's (share perms or security tab) i get
> a warning window popup stating, "Changes cannot be saved. Access is
> denied"
> 
> I am logged into the AD/DC as Administrator and have a username map
> file declared in the smb.conf that equates root to administrator,
> admin and the directory that the share represents is owned by root.
Are you sure you are being mapped to root.  I would recommend
user the SeDiskoperatorPrivilege instead.






cheers, jerry
====================================================================Alleviating
the pain of Windows(tm)      ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"There's an anonymous coward in all of us."              
--anonymous
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDu+mLIR7qMdg1EfYRAoqJAJ9tx67jpymQjEQQ9ojgp9kTAON7jQCff8T9
9SzeRsh9ZElwbnv8/ZLs7RM=Vpq8
-----END PGP SIGNATURE-----