Samba 4 insufficientAccessRights when modifying Configuration

Nadezhda Ivanova nivanova at samba.org
Fri Jul 27 06:01:00 MDT 2012


Theoretically to modify the Configuration or the Schema you need to be
Enterprise admin, as these are forest-wide changes...

On Fri, Jul 27, 2012 at 2:37 PM, Brian C. Huffman <
bhuffman at etinternational.com> wrote:

> Yep - domain administrator.
>
>
> On 7/27/12 7:27 AM, Nadezhda Ivanova wrote:
>
>> Are you running the installer as Administrator?
>>
>> On Fri, Jul 27, 2012 at 2:11 PM, Brian C. Huffman <
>> bhuffman at etinternational.com <mailto:bhuffman@**etinternational.com<bhuffman at etinternational.com>>>
>> wrote:
>>
>>     All,
>>
>>     I'm getting the following (seen using wireshark):
>>     LDAPMessage modifyResponse(15) insufficientAccessRights (00002098:
>>     Object
>>     CN=group-Display,CN=407,CN=**DisplaySpecifiers,CN=**
>> Configuration,DC=xmen,DC=eti
>>     has no write property access)
>>
>>     when trying to modify the schema from a software installer.
>>
>>     The installer is trying to add a value to adminContextMenu of
>>     "2,{11330101-C4C8-11D6-B1DF-**000476962053}"
>>
>>     If I try to do the same thing with ADSI, it appears to work.
>>     Unfortunately there are MANY such modifications the installer
>>     needs to do, so doing it manually would be extremely tedious.
>>
>>     Is there a reason why the installer can't write but ADSI can?
>>
>>     Thanks,
>>     Brian
>>
>>
>>
>
>


More information about the samba-technical mailing list