samba - May 2010 - Samba4 upgradeprovision and sysvol permissions error

Hi!
I have recently upgraded samba4 to the latest GIT build.
I have run upgradeprovision according to upgrading-samba4.txt instructions.
All seems to be well, but when i try to access Group Policy Objects from 
gpmc utility on windows i get the following error message:

---------------------------
Group Policy Management
---------------------------
The permissions for this GPO in the SYSVOL folder are inconsistent with
those in Active Directory. It is recommended that these permissions be
consistent. To change the SYSVOL permissions to those in Active Directory,
click OK.


After OK'ing i can edit and modify the setting and i believe everything 
gets applied correctly. However when i re-select the same object sam 
error message appears.
What should be the permissions on sysvol directory? And where is he 
place where they are stored?

I did not see this behaviour in the previous build, befor running 
upgradeprovision

Thx

Luk

On Thu, 2010-05-20 at 19:29 +0100, Lukasz Zalewski wrote:
> Hi!
> I have recently upgraded samba4 to the latest GIT build.
> I have run upgradeprovision according to upgrading-samba4.txt instructions.
> All seems to be well, but when i try to access Group Policy Objects from 
> gpmc utility on windows i get the following error message:
> 
> ---------------------------
> Group Policy Management
> ---------------------------
> The permissions for this GPO in the SYSVOL folder are inconsistent with
> those in Active Directory. It is recommended that these permissions be
> consistent. To change the SYSVOL permissions to those in Active Directory,
> click OK.
> 
> 
> After OK'ing i can edit and modify the setting and i believe everything
> gets applied correctly. However when i re-select the same object sam 
> error message appears.
> What should be the permissions on sysvol directory? And where is he 
> place where they are stored?
> 
> I did not see this behaviour in the previous build, befor running 
> upgradeprovision
upgradeprovision has fixed the ACLs in your directory, but not those on
disk.  A big update to upgradeprovision is pending - keep an eye on the
GIT tree or ask Matthieu Patou (CC'ed). 

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.



-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL:
<http://lists.samba.org/pipermail/samba/attachments/20100521/37b7b3fb/attachment.pgp>

SNIP
>
>>
>> What should be the permissions on sysvol directory? And where is he
>> place where they are stored?
>>
>> I did not see this behaviour in the previous build, befor running
>> upgradeprovision
>
> upgradeprovision has fixed the ACLs in your directory, but not those 
> on
> disk.  A big update to upgradeprovision is pending - keep an eye on 
> the
> GIT tree or ask Matthieu Patou (CC'ed).
Yes, will do.  Do you have the sysvol info so that it can be manually 
set or should we see Matthieu for that as well?

TIA

TMS III
>
>
>
> Andrew Bartlett
>
> --
> Andrew Bartlett http://samba.org/~abartlet/
> Authentication Developer, Samba Team http://samba.org
> Samba Developer, Cisco Inc.
>
>
>
>