Re: Tracing ACL problems (insuficient access)

[Dieter Kluenter <dieter@dkluenter.de>]

Hi,

"Jason C. Leach" <jleach@ocis.net> writes:

> hi,
>
> I'm trying to track down an ACL problem. When I use smbpasswd to add
> a machine account, I get insuficient access. If I add my samba
> account access to * write it works, but if I:
>
> access to attrs=uid,pwdLastSet,logonTime,logoffTime,kickoffTime,pwdCanChange,pwdMustChange,displayName,cn,rid,primaryGroupID,lmPassword,ntPassword,acctFlags,objectclass,userPassword
>      by dn="cn=SAMBA,o=xxx.com,dc=xxx,dc=com" write
>      by * none
>
> it fails with insuficient access. How can I trace what attribute it
> needs access to?

You have to grant write access to your users subtree.

-Dieter
-- 
Dieter Kluenter  | Systemberatung
Tel:040.64861967 | Fax: 040.64891521
mailto: dkluenter(at)dkluenter.de
http://www.avci.de