samba - Mar 2007 - smbldap-useradd says "Error: modifications require authentication at /usr/lib/perl5/5.8.8/smbldap_tools.pm line 1056."

I'm trying to get Samba 3.0.23d set up to run as a PDC on SuSE 10.2.  
I'm getting *very* close, but I have one small issue.
I can't add users.  When I run:
smbldap-useradd -a <a new user> -m

I get the following in the messages file:
Mar  6 13:59:38 macallan slapd[4731]: conn=50 fd=24 ACCEPT from 
IP=127.0.0.1:11246 (IP=0.0.0.0:389)
Mar  6 13:59:38 macallan slapd[4731]: conn=50 op=0 BIND 
dn="cn=Manager,dc=<MY DOMAIN>,dc=com" method=128
Mar  6 13:59:38 macallan slapd[4731]: conn=50 op=0 RESULT tag=97 err=49 
textMar  6 13:59:38 macallan slapd[4731]: conn=50 op=1 SRCH base="dc=<MY
DOMAIN>,dc=com" scope=2 deref=2 
filter="(&(objectClass=posixAccount)(uid=<A NEW USER>))"
Mar  6 13:59:38 macallan slapd[4731]: conn=50 op=1 SEARCH RESULT tag=101 
err=0 nentries=0 textMar  6 13:59:38 macallan slapd[4731]: conn=50 op=2 SRCH 
base="cn=NextFreeUnixId,dc=<MY DOMAIN>,dc=com" scope=0 deref=2 
filter="(objectClass=sambaUnixIdPool)"
Mar  6 13:59:38 macallan slapd[4731]: conn=50 op=2 SEARCH RESULT tag=101 
err=0 nentries=1 textMar  6 13:59:38 macallan slapd[4731]: conn=50 op=3 MOD 
dn="cn=NextFreeUnixId,dc=<MY DOMAIN>,dc=com"
Mar  6 13:59:38 macallan slapd[4731]: conn=50 op=3 MOD attr=uidNumber
Mar  6 13:59:38 macallan slapd[4731]: conn=50 op=3 RESULT tag=103 err=8 
text=modifications require authentication
Mar  6 13:59:38 macallan slapd[4731]: conn=50 fd=24 closed (connection lost)

Please let me know if anything else is needed.  I can get the "net 
groupmap list" that the populate script added, so I think it's almost
there.

Eric

Hi Eric,

This line here looks like the interesting bit to me.
>
> Mar  6 13:59:38 macallan slapd[4731]: conn=50 op=3 RESULT tag=103 
> err=8 text=modifications require authentication
It looks like the useradd script is doing an anonymous bind, which is 
interesting since you mentioned that you used the populate script which 
should be using the same bind settings. have you reset any passwords? 
changed any acls? I would double check the bind DN and password in the 
smbldap-tools config.

Regards,

Michael Heydon