[Samba] Re: Re: Joining Windows XP Prof Client To Domain

Jamrock
Thu, 13 Jul 2006 11:56:12 -0000

"zdennis" <zdennis@mktec.com> wrote in message
news:44B51340.6090800@mktec.com...
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Jamrock,
>
> Thanks for your reply. I just got my windows xp client to join the domain.
After some alterations that Robert had me make in
> another thread, I believe that fixed my samba issues.
>
> However, I can only join a domain with the user root, and not with the
user administrator. If I try to join with the user
> administrator I get...
>
> [2006/07/12 11:10:07, 0] lib/smbldap.c:smbldap_open(922)
>   smbldap_open: cannot access LDAP when not root..
>
> Do I need to give administrator specific permissions to query ldap?

I have never tried.  I have used root for administrative purposes.

Typically, I give administrative rights to users by putting them as members
of the Doman Admins group.  You can try that.

BTW,  I use the NT 4.0 User Manager for Domains tool to manage my users and
groups.  It works quite well with the smb-ldap tools.  Put the tool on a
Samba share and run it from a workstation.

You can find it here http://support.microsoft.com/kb/173673/