Samba 4 insufficientAccessRights when modifying Configuration

Brian C. Huffman bhuffman at etinternational.com
Fri Jul 27 07:20:58 MDT 2012


Sorry - I should have been clear.  I'm running as "Administrator" which 
is a member of the Enterprise Admins (and also Schema Admins, just in case).

-b

On 07/27/2012 08:01 AM, Nadezhda Ivanova wrote:
> Theoretically to modify the Configuration or the Schema you need to be 
> Enterprise admin, as these are forest-wide changes...
>
> On Fri, Jul 27, 2012 at 2:37 PM, Brian C. Huffman 
> <bhuffman at etinternational.com <mailto:bhuffman at etinternational.com>> 
> wrote:
>
>     Yep - domain administrator.
>
>
>     On 7/27/12 7:27 AM, Nadezhda Ivanova wrote:
>
>         Are you running the installer as Administrator?
>
>         On Fri, Jul 27, 2012 at 2:11 PM, Brian C. Huffman
>         <bhuffman at etinternational.com
>         <mailto:bhuffman at etinternational.com>
>         <mailto:bhuffman at etinternational.com
>         <mailto:bhuffman at etinternational.com>>> wrote:
>
>             All,
>
>             I'm getting the following (seen using wireshark):
>             LDAPMessage modifyResponse(15) insufficientAccessRights
>         (00002098:
>             Object
>            
>         CN=group-Display,CN=407,CN=DisplaySpecifiers,CN=Configuration,DC=xmen,DC=eti
>             has no write property access)
>
>             when trying to modify the schema from a software installer.
>
>             The installer is trying to add a value to adminContextMenu of
>             "2,{11330101-C4C8-11D6-B1DF-000476962053}"
>
>             If I try to do the same thing with ADSI, it appears to work.
>             Unfortunately there are MANY such modifications the installer
>             needs to do, so doing it manually would be extremely tedious.
>
>             Is there a reason why the installer can't write but ADSI can?
>
>             Thanks,
>             Brian
>
>
>
>
>



More information about the samba-technical mailing list