Samba 4 insufficientAccessRights when modifying Configuration

[Andrew Bartlett]

On Mon, 2012-07-30 at 14:05 -0400, Brian C. Huffman wrote:
> Another difference seems to be how it binds.  I'm not sure what this 
> means, but the Client Name (Principal) part of the Kerberos ticket is 
> different.  Reminder - the modify performed by ADSI succeeds whereas the 
> one by the installer fails.
> 
> (Installer):

>                                                              Client 
> Realm: XMEN.ETI
>                                                              Client Name 
> (Principal): bhuffman-v1$

> (ADSI):

> (Principal): Administrator

This is the key detail.  Install as administrator and it should just
work.  It is not generally expected that a machine account has
permission to modify the directory.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org