Samba 4 insufficientAccessRights when modifying Configuration
Brian C. Huffman
bhuffman at etinternational.com
Fri Jul 27 07:20:58 MDT 2012
Sorry - I should have been clear. I'm running as "Administrator" which
is a member of the Enterprise Admins (and also Schema Admins, just in case).
-b
On 07/27/2012 08:01 AM, Nadezhda Ivanova wrote:
> Theoretically to modify the Configuration or the Schema you need to be
> Enterprise admin, as these are forest-wide changes...
>
> On Fri, Jul 27, 2012 at 2:37 PM, Brian C. Huffman
> <bhuffman at etinternational.com <mailto:bhuffman at etinternational.com>>
> wrote:
>
> Yep - domain administrator.
>
>
> On 7/27/12 7:27 AM, Nadezhda Ivanova wrote:
>
> Are you running the installer as Administrator?
>
> On Fri, Jul 27, 2012 at 2:11 PM, Brian C. Huffman
> <bhuffman at etinternational.com
> <mailto:bhuffman at etinternational.com>
> <mailto:bhuffman at etinternational.com
> <mailto:bhuffman at etinternational.com>>> wrote:
>
> All,
>
> I'm getting the following (seen using wireshark):
> LDAPMessage modifyResponse(15) insufficientAccessRights
> (00002098:
> Object
>
> CN=group-Display,CN=407,CN=DisplaySpecifiers,CN=Configuration,DC=xmen,DC=eti
> has no write property access)
>
> when trying to modify the schema from a software installer.
>
> The installer is trying to add a value to adminContextMenu of
> "2,{11330101-C4C8-11D6-B1DF-000476962053}"
>
> If I try to do the same thing with ADSI, it appears to work.
> Unfortunately there are MANY such modifications the installer
> needs to do, so doing it manually would be extremely tedious.
>
> Is there a reason why the installer can't write but ADSI can?
>
> Thanks,
> Brian
>
>
>
>
>
More information about the samba-technical
mailing list