samba - Apr 2024 - Samba-tool gpo manage - The authenticated user does not have sufficient privileges

Hi all,

I run cmd:
samba-tool gpo manage scripts startup add \
{31B2F340-016D-11D2-945F-00C04FB984F9} \
/var/lib/samba/sysvol/fartest.local/scripts/startup.bat

with result:
[cut]
ERROR: The authenticated user does not have sufficient privileges
 ? File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line
3230,
in run
 ??? create_directory_hier(conn, vgp_dir)
 ? File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line
383,
in create_directory_hier
 ??? conn.mkdir(path)
signed SMB2 message (sign_algo_id=2)

I tried also this cmd with -UAdministrator but the same error appears.

Is this normal?
If yes where to configure this permissions?

-- 
Jaros?aw K?opotek, kom. 607 893 111

On Thu, 18 Apr 2024 09:03:10 +0200
Jaros?aw K?opotek - INTERDUO via samba <samba at lists.samba.org> wrote:
> Hi all,
> 
> I run cmd:
> samba-tool gpo manage scripts startup add \
> {31B2F340-016D-11D2-945F-00C04FB984F9} \
> /var/lib/samba/sysvol/fartest.local/scripts/startup.bat
Are you running the command as root or with sudo ?
> 
> with result:
> [cut]
> ERROR: The authenticated user does not have sufficient privileges
>  ? File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py",
line
> 3230, in run
>  ??? create_directory_hier(conn, vgp_dir)
>  ? File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py",
line
> 383, in create_directory_hier
>  ??? conn.mkdir(path)
> signed SMB2 message (sign_algo_id=2)
> 
> I tried also this cmd with -UAdministrator but the same error appears.
> 
> Is this normal?
> If yes where to configure this permissions?
What version of Samba are you using, there have been a few updates in
the area that is failing for you.

Rowland

On 4/18/24 1:03 AM, Jaros?aw K?opotek - INTERDUO via samba
wrote:
> Hi all,
>
> I run cmd:
> samba-tool gpo manage scripts startup add \
> {31B2F340-016D-11D2-945F-00C04FB984F9} \
> /var/lib/samba/sysvol/fartest.local/scripts/startup.bat
>
> with result:
> [cut]
> ERROR: The authenticated user does not have sufficient privileges
> ? File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line
> 3230, in run
> ??? create_directory_hier(conn, vgp_dir)
> ? File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line
383,
> in create_directory_hier
> ??? conn.mkdir(path)
> signed SMB2 message (sign_algo_id=2)
You've authenticated an SMB session, and your user is attempting to 
create a directory on the share, but is getting a permissions error. If 
this is happening for the Administrator, then you clearly have a 
permissions issue on your sysvol share. Try running `samba-tool ntacl 
sysvolreset`.

-- 
David Mulder
Labs Software Engineer, Samba
SUSE
1221 S Valley Grove Way, Suite 500
Pleasant Grove, UT 84062
(P)+1 385.208.2989
dmulder at suse.com
http://www.suse.com