insufficient access rights
Gerald Carter
jerry at plainjoe.org
Wed Mar 17 06:52:02 MDT 2010
Nadezhda Ivanova wrote:
> I can't say without examining the SD of the machine
> object. I'll try to reproduce the issue and examine what's
> going on. It does look like an acl error.
Nadya,
Just from a cursory glance, Matthew's post is accurate regarding
Windows behavior.
http://lists.samba.org/archive/samba-technical/2010-March/070018.html
This is the "validated write" access.
http://msdn.microsoft.com/en-us/library/ms675747%28VS.85%29.aspx
And you might want to examine the process of delegating control of
a pre-existing machine objects and how that impacts the ACEs.
Maybe just a dump from acldiag.exe in the supports tools would
give you the information you need.
Of course, you may already know all this in which case feel
free to ignore me.
>>>> Im trying to join my domain on a xp computer. When trying to join as a
>>>> normal user, i get this error.
>>>> Failed to modify record CN=KOFFEINMASKIN,OU=test,DC=local,DC=test,DC=lan:
>>>> error in module acl: insufficient access rights (50)
>>>> However, i can join the domain as an administrator, is this normal?
>>>> Sounds quite strange.
cheers, jerry
--
=====================================================================
Senior Software Developer Likewise-CIFS
http://www.likewiseopen.org/
"What man is a man who does not make the world better?" --Balian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 252 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20100317/db133827/attachment.pgp>
More information about the samba-technical
mailing list