[Samba] Gpo issue

Sam
2016-02-17T12:42:53Z

Hi everybody!

I have two samba AD server (  4.2.7-SerNet-Debian-8.wheezy ). I try to
make gpo working but I'm facing some problems...

My Samba4 comes from an old windows AD so I have launch these command :

samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix
samba-tool ntacl sysvolreset ( that take about 10 minutes to complete )
samba-tool dbcheck --cross-ncs --fix

But the following errors still stay on both servers...

root at S4bis:~# samba-tool dbcheck --cross-ncs --reset-well-known-acls
Checking 7747 objects
ERROR: missing GUID component for ipsecOwnersReference in object
CN=ipsecISAKMPPolicy{7238523D-70FA-11D1-864C-14A300000000},CN=IP
Security,CN=System,DC=ariane,DC=intra -
CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP
Security,CN=System,CN=System,DC=ariane,DC=intra
unable to find object for DN
CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP
Security,CN=System,CN=System,DC=ariane,DC=intra - (No such Base DN:
CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP
Security,CN=System,CN=System,DC=ariane,DC=intra)
Not removing dangling forward link
Please use --fix to fix these errors
Checked 7747 objects (1 errors)

root at S4bis:~# samba-tool dbcheck --cross-ncs
Checking 7747 objects
ERROR: missing GUID component for ipsecOwnersReference in object
CN=ipsecISAKMPPolicy{7238523D-70FA-11D1-864C-14A300000000},CN=IP
Security,CN=System,DC=ariane,DC=intra -
CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP
Security,CN=System,CN=System,DC=ariane,DC=intra
unable to find object for DN
CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP
Security,CN=System,CN=System,DC=ariane,DC=intra - (No such Base DN:
CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP
Security,CN=System,CN=System,DC=ariane,DC=intra)
Not removing dangling forward link
Please use --fix to fix these errors
Checked 7747 objects (1 errors)

At the beginning a "samba-tool ntacl sysvolreset" command did it works
but not for a long time, the only thing I do after was playing with the
RSAT policy tool... then I thinked that was an rsync issue, but now my
sysvol replication work well...
Maybe a stupid question but is there a way to recreate sysvol folders
and files?

Thanks for your help!

Sam