samba - Apr 2020 - Cant delete OU

Hello,

I want to delete a OU in my Samba AD.
On RSAT I get "Access denied"
When I try it with ldapvi I get "dsdb_access: Access check failed on"
I have also try to repair the samba DB with  samba-tool dbcheck
--cross-ncs --fix --yes but that does not solve the problem.

The OU is a self generated one.

Best regards

Hi Basti,
> I want to delete a OU in my Samba AD.
> On RSAT I get "Access denied"
> When I try it with ldapvi I get "dsdb_access: Access check failed
on"
> I have also try to repair the samba DB with  samba-tool dbcheck
> --cross-ncs --fix --yes but that does not solve the problem.
> 
> The OU is a self generated one.
what do you mean by "self generated one". If you create a new OU in 
ADUC, it is "protected against deletion" by default using a "Deny
all"
ACL. If you want to delete it you have to remove that ACE entry first.

Cheers,

Denis
> 
> Best regards
>

thx denis

On 29.04.20 11:49, Denis CARDON via samba wrote:
> Hi Basti,
> 
> If you create a new OU in
> ADUC, it is "protected against deletion" by default using a
"Deny all"
> ACL. If you want to delete it you have to remove that ACE entry first.
> 
> Cheers,
> 
> Denis