I have opensuse 11.2 on a box I'd like to use in an AD environment. I've setup Kerberos and samba correctly I believe, but I have a question about something.

Following several tutorials I always get to a point in the LDAP config process (via yast) were I have check off "Create Default Configuration Objects" and an "ldapconfig" sub-tree. Why do I have to do this? I would like to not have to add anything to my windows LDAP database (other than the linux computer's account).

I can use the LDAP browser to browse LDAP no problem, but when I go to "users and group management" and try to connect to a DC to retrieve a list of LDAP users it tells me an "ldapconfig" sub-tree doesn't exist and do I want to create one. NO. I don't want to add a subtree to AD- do I have to do this?

One of the things I'd like to do is to grant an LDAP user access to this linux box.

Thanks for any responses I'm new to linux/windows interoperability and linux in general.