samba - Nov 2013 - samba4 | access ldap, what password

Hi all,

I have just started our first attempts to upgrade our samba3/ldap domain 
to samba4. I can see my users, I can see my grouops, kinit works etc. 
Good start.

But now SUCH a basic question:

I would like to browse my new samba4 ldap directory, and I am completely 
in the dark in what share to provide my credentials. Anonymous access 
works, but I cannot see much. (google tells me this is normal for active 
directory)

I have an administrator user, I can change it's password using 
'samba-tool user setpassword administrator' etc, smbclient works, but in
what form should I use the account to talk ldap over 389?

MJ

> I would like to browse my new samba4 ldap directory, and I am completely
> in the dark in what share to provide my credentials. Anonymous access
in what SHAPE I meant

Anyway: I learned quite a bit using tdbdump on DC=SAMBA,DC=EXAMPLE,DC=COM

I found out the correct form for my administrator account and can logon. 
However I can still see only bits of my directory tree. No CN=users, for 
example. (however using CN=users,DC=SAMBA,DC=EXAMPLE,DC=COM as a base DN 
works, meaning there are more CN's than I can see)

What account should I use to browse the WHOLE directory? (sorry for the 
very very basic questions)

MJ