samba - Apr 2024 - Samba-tool gpo manage - The authenticated user does not have sufficient privileges

On 4/18/24 1:03 AM, Jaros?aw K?opotek - INTERDUO via samba
wrote:
> Hi all,
>
> I run cmd:
> samba-tool gpo manage scripts startup add \
> {31B2F340-016D-11D2-945F-00C04FB984F9} \
> /var/lib/samba/sysvol/fartest.local/scripts/startup.bat
>
> with result:
> [cut]
> ERROR: The authenticated user does not have sufficient privileges
> ? File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line
> 3230, in run
> ??? create_directory_hier(conn, vgp_dir)
> ? File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line
383,
> in create_directory_hier
> ??? conn.mkdir(path)
> signed SMB2 message (sign_algo_id=2)
You've authenticated an SMB session, and your user is attempting to 
create a directory on the share, but is getting a permissions error. If 
this is happening for the Administrator, then you clearly have a 
permissions issue on your sysvol share. Try running `samba-tool ntacl 
sysvolreset`.

-- 
David Mulder
Labs Software Engineer, Samba
SUSE
1221 S Valley Grove Way, Suite 500
Pleasant Grove, UT 84062
(P)+1 385.208.2989
dmulder at suse.com
http://www.suse.com

W dniu 18.04.2024 o?18:11, David Mulder via samba pisze:
> On 4/18/24 1:03 AM, Jaros?aw K?opotek - INTERDUO via samba wrote:
>> Hi all,
>>
>> I run cmd:
>> samba-tool gpo manage scripts startup add \
>> {31B2F340-016D-11D2-945F-00C04FB984F9} \
>> /var/lib/samba/sysvol/fartest.local/scripts/startup.bat
>>
>> with result:
>> [cut]
>> ERROR: The authenticated user does not have sufficient privileges
>> ? File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py",
line
>> 3230, in run
>> ??? create_directory_hier(conn, vgp_dir)
>> ? File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py",
line
>> 383, in create_directory_hier
>> ??? conn.mkdir(path)
>> signed SMB2 message (sign_algo_id=2)
>
> You've authenticated an SMB session, and your user is attempting to 
> create a directory on the share, but is getting a permissions error. 
> If this is happening for the Administrator, then you clearly have a 
> permissions issue on your sysvol share. Try running `samba-tool ntacl 
> sysvolreset`.
This not helped ... but adding read only = no in [sysvol] share helped.
Thanks for leading to solution.

-- 
Jaros?aw K?opotek, kom. +48 607 893 111