Yah, jimc again. I still cannot figure out what is wrong with my dc. The problem began with being unable to log on from Windows boxes after a power hit. The initial symptoms were: 1) When I log in on a Windows machine, with an account that should have administrator permissions, I don't have said admin rights. 2) When I attempt to launch the Windows remote server tools, I can select the server, but when I attempt to connect I get the ever popular 'rpc server unavailable'. 3) When I run 'samba-tool gpo aclcheck', I get an uncaught exception error (-1073741705) 'Indicates the ACL structure is is not valid'. Followed, of course, by the unwinding call stack. 4) smbclient //localhost/netlogon -UAdministrator -c 'ls' nets me the message: 'Domain=[ozco] os=[unix] Server=[Samba 4.3.1] NT_STATUS_INVALID_ACL listing \*' After much wailing and gnashing of teeth, I did a setfacl. Now, 'samba-tool gpo aclcheck' returns "uncaught exception - (-1073741790 'access denied')". I really would appreciate any help you can offer! -jimc
Sent from my iPhone> On 18 Nov 2015, at 03:33, jimc <jesmeyano at gmail.com> wrote: > > Yah, jimc again. > > I still cannot figure out what is wrong with my dc. The problem began with being unable to log on from Windows boxes after a power hit. > > The initial symptoms were: > > 1) When I log in on a Windows machine, with an account that should have > administrator permissions, I don't have said admin rights. > > 2) When I attempt to launch the Windows remote server tools, I can > select the server, but when I attempt to connect I get the ever popular > 'rpc server unavailable'. > > 3) When I run 'samba-tool gpo aclcheck', I get an uncaught exception > error (-1073741705) 'Indicates the ACL structure is is not valid'. > Followed, of course, by the unwinding call stack. > > 4) smbclient //localhost/netlogon -UAdministrator -c 'ls' nets me the > message: > 'Domain=[ozco] os=[unix] Server=[Samba 4.3.1] > NT_STATUS_INVALID_ACL listing \*' > > After much wailing and gnashing of teeth, I did a setfacl. > > Now, 'samba-tool gpo aclcheck' returns "uncaught exception - (-1073741790 'access denied')". > >1) Did you run a disk check (fsck) on your DC after the outage? 2) Did you try to reset ACL's on your Sysvol? Viktor
Greetings, jimc!> After much wailing and gnashing of teeth, I did a setfacl.Unfortunately, Samba does not use POSIX ACL's, if its own ACL's are present on files. (If at all.) Unless you have it configured for POSIX ACL's, but that's not the case for DC.> Now, 'samba-tool gpo aclcheck' returns "uncaught exception - > (-1073741790 'access denied')".How predictable.> I really would appreciate any help you can offer!Sorry, I have the same issue (for most part), and would like Samba being more sane about integration. Very much like. -- With best regards, Andrey Repin Sunday, November 22, 2015 13:02:25 Sorry for my terrible english...
On 22/11/15 10:04, Andrey Repin wrote:> Greetings, jimc! > >> After much wailing and gnashing of teeth, I did a setfacl. > Unfortunately, Samba does not use POSIX ACL's, if its own ACL's are present on > files. (If at all.) > Unless you have it configured for POSIX ACL's, but that's not the case for DC.Samba doesn't use ACLs at all, it is just a bridge between windows and the underlying OS and if you set the ACLs, from windows, you can read them with getfacl, so why can you not set them with setfacl?> >> Now, 'samba-tool gpo aclcheck' returns "uncaught exception - >> (-1073741790 'access denied')". > How predictable.Not really, it just means that the wrong ACL's were probably set.> >> I really would appreciate any help you can offer! > Sorry, I have the same issue (for most part), and would like Samba being more > sane about integration. > Very much like.Just because you cannot get it working is no reason to come on here bad mouthing Samba, others can and do get it working. Rowland> >
Barf. jimc On Nov 22, 2015 2:05 AM, "Andrey Repin" <anrdaemon at yandex.ru> wrote:> Greetings, jimc! > > > After much wailing and gnashing of teeth, I did a setfacl. > > Unfortunately, Samba does not use POSIX ACL's, if its own ACL's are > present on > files. (If at all.) > Unless you have it configured for POSIX ACL's, but that's not the case for > DC. > > > Now, 'samba-tool gpo aclcheck' returns "uncaught exception - > > (-1073741790 'access denied')". > > How predictable. > > > I really would appreciate any help you can offer! > > Sorry, I have the same issue (for most part), and would like Samba being > more > sane about integration. > Very much like. > > > -- > With best regards, > Andrey Repin > Sunday, November 22, 2015 13:02:25 > > Sorry for my terrible english... > >