On Sat, 29 Jun 2024 10:50:47 -0400 Sonic via samba <samba at lists.samba.org> wrote:> Every time I use RSAT's GPO editor Samba DCs fail sysvolcheck, and > require a sysvolreset. This happens on two different DC's (domains).How are you running the domains ? have you added any rfc2307 attributes ?> > Also on one of the DCs if I attempt the sysvolreset while samba is > running I get a continuous: > ... > idmap range not specified for domain '*' > idmap range not specified for domain '*' > idmap range not specified for domain '*' > idmap range not specified for domain '*' > idmap range not specified for domain '*' > idmap range not specified for domain '*' > idmap range not specified for domain '*' > idmap range not specified for domain '*' > ... > > I therefore need to stop samba in order to do the sysvolreset.How are you running the sysvolreset command ? I do not get any output from samba-tool when I run it. Rowland
On Sat, Jun 29, 2024 at 11:22?AM Rowland Penny via samba <samba at lists.samba.org> wrote:> How are you running the domains ? have you added any rfc2307 attributesThey were configured for rfc2307. If I comment out: idmap_ldb:use rfc2307 = yes I get the same result.> How are you running the sysvolreset command ? I do not get any output > from samba-tool when I run it.Using: samba-tool ntacl sysvolreset I get no output from one of the domains, whether or not samba is running. The other system/domain gives that continuous idmap output if samba is running. Chris
On Sat, Jun 29, 2024 at 11:22?AM Rowland Penny via samba <samba at lists.samba.org> wrote:> How are you running the domains ? have you added any rfc2307 attributesI have not manually added any rfc2307 attributes. I did provision the domains as such.