Samba 4 insufficientAccessRights when modifying Configuration

Andrew Bartlett abartlet at
Mon Jul 30 23:48:07 MDT 2012

On Mon, 2012-07-30 at 14:05 -0400, Brian C. Huffman wrote:
> Another difference seems to be how it binds.  I'm not sure what this 
> means, but the Client Name (Principal) part of the Kerberos ticket is 
> different.  Reminder - the modify performed by ADSI succeeds whereas the 
> one by the installer fails.
> (Installer):

>                                                              Client 
> Realm: XMEN.ETI
>                                                              Client Name 
> (Principal): bhuffman-v1$

> (ADSI):

> (Principal): Administrator

This is the key detail.  Install as administrator and it should just
work.  It is not generally expected that a machine account has
permission to modify the directory.

Andrew Bartlett

Andrew Bartlett                      
Authentication Developer, Samba Team 

More information about the samba-technical mailing list