Is anyone doing LDAP-based Samba domains

[dunkirk]

I've had this on my list of things to do for a long time now, and I recently got some time to work on it. I've found a couple of great resources to follow, but mostly the one at http://samba.idealx.org/smbldap-howto.en.html. (Perhaps http://www.nomis52.net/?section=docs&page=samldap as well.) Anyway, I struggled for about 8 or 10 hours, and I still couldn't join a machine to the domain. I had checked and rechecked so many things that I decided to upgrade from 3.0.10 to the latest 3.0.14a. Then things really start to get weird. I'm getting errors in the logs:

net: smbldap_open: cannot access LDAP when not root..
net: Failed to open /var/lib/samba/private/secrets.tdb

From what I can gather, this is a known bug, but it's supposed to be fixed in 3.0.11. I can fix these by `chmod u+s /usr/bin/net'. However, I still get this, and I have no idea where it's coming from:

rc-scripts: /sbin/runscript.sh: must be root to run init scripts

I'm just about to go on a short vacation. I hope to have access on the road, but my wife made the reservations, so I don't know for sure. But I just wanted to throw this out and see if anyone could help me put this all together. It's not like I'm a noob with Samba; I've been running a non-LDAP-based domain for many years. I just want to try to tie OS (and therefore email) and Samba passwords together, and provide a backend which other things (OpenGroupware) can plug into. (I bet THAT will be fun...)
_________________
Acts 17:28, "For in Him we live, and move, and have our being."