editing ntsecuritydescriptor SDDL resutls in confusing error message # ldbedit -H ldap://172.18.103.211 -b "CN=foo,CN=Users,DC=sdom1,DC=site" -Uadministrator%Passw0rd ntsecuritydescriptor ndr_pull_relative_ptr1: ndr_pull_error(Buffer Size Error): ndr_pull_relative_ptr1 rel_offset(1094990407) > ndr->data_size(2814) at ../../librpc/ndr/ndr.c:1907 This is because the SDDL is first tried to be interpreted in binary format and not in string format.
(In reply to Björn Jacke from comment #0) It is picking up the 'log level' from the smb.conf , try adding '-d0' to the end of the command.