samba - Jul 2013 - Classicupgrade "set_nt_acl_no_snum: fset_nt_acl returned NT_STATUS_INVALID_OWNER"

Hi,

I have a problem during the classicupgrade. The problem was discussed in
march on this list, but there seems to be nosolution.
Can anyone help?

...
Setting password for administrator
Administrator password has been set to password of user 'root'
idmapping sid_to_xid failed for id[0]=S-1-5-32-544: NT_STATUS_NONE_MAPPED
set_nt_acl_no_snum: fset_nt_acl returned NT_STATUS_INVALID_OWNER.
ERROR(runtime): uncaught exception - (-1073741734,
'NT_STATUS_INVALID_OWNER')
  File
"/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/__init__.py",
line 175, in _run
    return self.run(*args, **kwargs)
  File
"/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/domain.py",
line 1318, in run
    useeadb=eadb, dns_backend=dns_backend, use_ntvfs=use_ntvfs)
  File
"/usr/local/samba/lib64/python2.7/site-packages/samba/upgrade.py",
line
932, in upgrade_from_samba3
    result.names.domaindn, result.lp, use_ntvfs)
  File
"/usr/local/samba/lib64/python2.7/site-packages/samba/provision/__init__.py",
line 1562, in setsysvolacl
    setntacl(lp,sysvol, SYSVOL_ACL, str(domainsid), use_ntvfs=use_ntvfs,
skip_invalid_chown=True, passdb=s4_passdb)
  File
"/usr/local/samba/lib64/python2.7/site-packages/samba/ntacls.py",
line 154, in setntacl
    smbd.set_nt_acl(file, security.SECINFO_OWNER |
security.SECINFO_GROUP | security.SECINFO_DACL | security.SECINFO_SACL, sd)

Regards

Axel Urban

Hello Axel,

first: To which samba version do you try to update? I recommented that 
you use the latest (4.0.7), because there were some improvments and 
patches included in the last version.



Am 14.07.2013 21:17, schrieb Axel Urban:
> idmapping sid_to_xid failed for id[0]=S-1-5-32-544: NT_STATUS_NONE_MAPPED
 > set_nt_acl_no_snum: fset_nt_acl returned NT_STATUS_INVALID_OWNER.
 > ERROR(runtime): uncaught exception - (-1073741734,
 > 'NT_STATUS_INVALID_OWNER')

S-1-5-32-544 is Administrators group. If it's a test environment, can 
you remove it and retry?


Regards,
Marc

Hello Axel,

Am 15.07.2013 22:00, schrieb Axel Urban:
> I used the 4.0.7 tar.gz.
>
> I removed the groupmap.tdb before.
Does this change anything when you do the classicupgrade?



 > Is there anything more I can do? Does
> samba read the /etc/group-File during classicupgrade?
I'm not sure on that. I only did upgrades from LDAP backend yet - not 
from tdb.


When you run the classicupgrade, can you run it with a higher debug 
level (-d 5) and see if there's anything else interesting around the 
error message?



Regards,
Marc