[Samba 4] AD Modifications fail from some client programs but not others

Brian C. Huffman bhuffman at etinternational.com
Tue May 29 09:14:25 MDT 2012


I was able to get the schema modifications for Kerio Mail server 
installed in Samba4 (I ran their executable on a Windows 2008 server and 
then located the schema that was added and then imported into S4).  
However, now I'm trying to run their UI portion of their admin and it's 
apparently trying to make changes that are being rejected by the Samba 
server.  The odd thing is that I can use the ADSI admin tool on Windows 
and perform (what seems to me to be) the same changes and it works.

Here's an example of what I see in wireshark when their executable is 

LDAPMessage modifyResponse(15) insufficientAccessRights (00002098: 
has no write property access)

They're trying to add a value to adminContextMenu of 

If I try to do the same thing with ADSI, it appears to work.  
Unfortunately there are other things they're also trying to do which 
fail, so I'm trying to understand what is happening.


More information about the samba-technical mailing list