samba - Feb 2016 - Bulk copy of files with owner info using Robocopy fails with error

Hello, 

I'm trying to take a Samba-integrated file storage appliance with ZFS as the
underlying file system (Nas4Free, in its latest incarnation, to be specific)
into use and have gotten it Active Directory integrated just fine, and created
shares on it. I can set the owner of the share to the domain Administrator, and
I can alter ownership information from a Windows box just fine. ACL's are in
other words working, and from the SSH command line I have no issues when I test
AD connectivity.

However, in order to fully deploy I need to be able to bulk copy over existing
directories with owner info intact, and to do that I have usually used Robocopy
with /COPY:DATSO (or /COPYALL which is /COPY:DATSOU though I believe Samba 4
doesn't use the U flag anyway) to get both the NTFS security (S) and owner
(O) information correct. But trying to do that to my new file server (using the
domain administrator account in an elevated command line) spits out an error.

ERROR 1307 (0x0000051B) Copying NTFS Security to Destination Directory
This security ID may not be assigned as the owner of this object.

/COPY:DATS works fine and I do get NTFS security across but it doesn't
replicate owner information (obviously) which means I'm stuck and can go no
further. Anyone bump into this or can just plain offer some advice on what might
be causing it?

On Mon, Feb 08, 2016 at 08:11:08AM +0000, Kimmo Jaskari
wrote:
> Hello, 
> 
> I'm trying to take a Samba-integrated file storage appliance with ZFS
as the underlying file system (Nas4Free, in its latest incarnation, to be
specific) into use and have gotten it Active Directory integrated just fine, and
created shares on it. I can set the owner of the share to the domain
Administrator, and I can alter ownership information from a Windows box just
fine. ACL's are in other words working, and from the SSH command line I have
no issues when I test AD connectivity.
> 
> However, in order to fully deploy I need to be able to bulk copy over
existing directories with owner info intact, and to do that I have usually used
Robocopy with /COPY:DATSO (or /COPYALL which is /COPY:DATSOU though I believe
Samba 4 doesn't use the U flag anyway) to get both the NTFS security (S) and
owner (O) information correct. But trying to do that to my new file server
(using the domain administrator account in an elevated command line) spits out
an error.
> 
> ERROR 1307 (0x0000051B) Copying NTFS Security to Destination Directory
> This security ID may not be assigned as the owner of this object.
Can you check in your Samba logs ? This looks like a SID -> uid/gid
mapping failure.