The Samba-Bugzilla – Bug 8981
InsufficientAccessRights to CN=DisplaySpecifiers,CN=Configuration
Last modified: 2012-11-26 07:47:58 UTC
I'm trying to run an installer that needs to add some values under CN=user-Display,CN=40C,CN=DisplaySpecifiers,CN=Configuration and I'm getting an access error:
modifyResponse(21) insufficientAccessRights (00002098: Object CN=user-Display,CN=40C,CN=DisplaySpecifiers,CN=Configuration,DC=xmen,DC=eti has no write property access)
However, when I try to add the same value using the ADSI tool (part of the Windows AD Toolset), it works.
Unfortunately there are a lot of similar additions and adding them manually (after finding them) is a daunting task...
I'm running as the Administrator of the domain, so this should work?
Created attachment 7702 [details]
Here's some of the debug output when I attempt to run the program that makes this modification. I've used these options: "samba -i -M single -d 10"
The installer doesn't run as administrator, it seems to
run as the machine account.
sids : S-1-5-21-2824053618-3522172672-2706769870-1104
sids : S-1-5-21-2824053618-3522172672-2706769870-515
sids : S-1-1-0
sids : S-1-5-2
sids : S-1-5-11