When a computer is trying to join a domain ( ala Windows) you need to
be a sysadmin to do so. I presume that you will need to supply the
username/passwd of the sysadmin of the samba svr to do so. I'm only
guessing.

This would prevent anybody with a computer from joining your domain
without permission.