samba - Mar 2018 - sysvolreset - open: error=40 (Too many levels of symbolic links)

hi folks,

After run *samba-tool ntacl sysvolreset *the below error occurs. I not
remember of make any modification directly on the server. I only manager
via rsat.

root at dc3:/etc/samba# samba-tool ntacl sysvolreset
*open: error=40 (Too many levels of symbolic links)*
ERROR(runtime): uncaught exception - (-1073741823, '{Operation Failed} The
requested operation was unsuccessful.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py",
line
176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/ntacl.py", line
239,
in run
    lp, use_ntvfs=use_ntvfs)
  File "/usr/lib/python2.7/dist-packages/samba/provision/__init__.py",
line
1600, in setsysvolacl
    passdb=s4_passdb, service=SYSVOL_SERVICE)
  File "/usr/lib/python2.7/dist-packages/samba/ntacls.py", line 162,
in
setntacl
    smbd.set_nt_acl(file, security.SECINFO_OWNER | security.SECINFO_GROUP |
security.SECINFO_DACL | security.SECINFO_SACL, sd, service=service)

root at dc3:/etc/samba# samba-tool dbcheck --cross-ncs --reset-well-known-acls
--fix --yes
Checking 8601 objects
Checked 8601 objects (0 errors)

# Global parameters
[global]
        netbios name = DC3
        realm = CAMPUS.EXAMPLE.INTRA
        server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl,
winbindd, ntp_signd, kcc, dnsupdate
        workgroup = CAMPUS
        server role = active directory domain controller
        idmap_ldb:use rfc2307 = yes
        ldap server require strong auth = no

[netlogon]
        path = /var/lib/samba/sysvol/campus.example.intra/scripts
        read only = No

[sysvol]
        path = /var/lib/samba/sysvol
        read only = No

Has anyone ever had this problem?

-- 
Elias Pereira

Hai, 

No, i have not seen the (Too many levels of symbolic links)  before.. 

Samba version ? Running on OS ? 
That might be very handy to know. 

Did you upgrade, if so, from .. To ...  Samba version ? 

And why was running : samba-tool ntacl sysvolreset needed? 



Greetz, 

Louis

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Elias Pereira via samba
> Verzonden: woensdag 14 maart 2018 13:24
> Aan: samba
> Onderwerp: [Samba] sysvolreset - open: error=40 (Too many 
> levels of symbolic links)
> 
> hi folks,
> 
> After run *samba-tool ntacl sysvolreset *the below error occurs. I not
> remember of make any modification directly on the server. I 
> only manager
> via rsat.
> 
> root at dc3:/etc/samba# samba-tool ntacl sysvolreset
> *open: error=40 (Too many levels of symbolic links)*
> ERROR(runtime): uncaught exception - (-1073741823, 
> '{Operation Failed} The
> requested operation was unsuccessful.')
>   File 
> "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line
> 176, in _run
>     return self.run(*args, **kwargs)
>   File 
> "/usr/lib/python2.7/dist-packages/samba/netcmd/ntacl.py", line
239,
> in run
>     lp, use_ntvfs=use_ntvfs)
>   File 
> "/usr/lib/python2.7/dist-packages/samba/provision/__init__.py",
line
> 1600, in setsysvolacl
>     passdb=s4_passdb, service=SYSVOL_SERVICE)
>   File "/usr/lib/python2.7/dist-packages/samba/ntacls.py", 
> line 162, in
> setntacl
>     smbd.set_nt_acl(file, security.SECINFO_OWNER | 
> security.SECINFO_GROUP |
> security.SECINFO_DACL | security.SECINFO_SACL, sd, service=service)
> 
> root at dc3:/etc/samba# samba-tool dbcheck --cross-ncs 
> --reset-well-known-acls
> --fix --yes
> Checking 8601 objects
> Checked 8601 objects (0 errors)
> 
> # Global parameters
> [global]
>         netbios name = DC3
>         realm = CAMPUS.EXAMPLE.INTRA
>         server services = s3fs, rpc, nbt, wrepl, ldap, cldap, 
> kdc, drepl,
> winbindd, ntp_signd, kcc, dnsupdate
>         workgroup = CAMPUS
>         server role = active directory domain controller
>         idmap_ldb:use rfc2307 = yes
>         ldap server require strong auth = no
> 
> [netlogon]
>         path = /var/lib/samba/sysvol/campus.example.intra/scripts
>         read only = No
> 
> [sysvol]
>         path = /var/lib/samba/sysvol
>         read only = No
> 
> Has anyone ever had this problem?
> 
> -- 
> Elias Pereira
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>

Hello Louis,

I use your apt for samba. Great works btw!! :D

root at dc3:/etc/samba# samba -V
Version 4.7.3-Debian

root at dc3:/etc/samba# lsb_release -a
No LSB modules are available.
Distributor ID: Debian
Description: Debian GNU/Linux 9.2 (stretch)
Release: 9.2
Codename: stretch

Did you upgrade, if so, from .. To ...  Samba version ?


No upgrades.

And why was running : samba-tool ntacl sysvolreset needed?


I tried the sysvolreset, as I applied a gpo to a printer deploy, but it did
not appear to the user. I did as I always did and it worked, but this time
it failed.

On Wed, Mar 14, 2018 at 9:32 AM, L.P.H. van Belle via samba <
samba at lists.samba.org> wrote:
> Hai,
>
> No, i have not seen the (Too many levels of symbolic links)  before..
>
> Samba version ? Running on OS ?
> That might be very handy to know.
>
> Did you upgrade, if so, from .. To ...  Samba version ?
>
> And why was running : samba-tool ntacl sysvolreset needed?
>
>
>
> Greetz,
>
> Louis
>
>
> > -----Oorspronkelijk bericht-----
> > Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> > Elias Pereira via samba
> > Verzonden: woensdag 14 maart 2018 13:24
> > Aan: samba
> > Onderwerp: [Samba] sysvolreset - open: error=40 (Too many
> > levels of symbolic links)
> >
> > hi folks,
> >
> > After run *samba-tool ntacl sysvolreset *the below error occurs. I not
> > remember of make any modification directly on the server. I
> > only manager
> > via rsat.
> >
> > root at dc3:/etc/samba# samba-tool ntacl sysvolreset
> > *open: error=40 (Too many levels of symbolic links)*
> > ERROR(runtime): uncaught exception - (-1073741823,
> > '{Operation Failed} The
> > requested operation was unsuccessful.')
> >   File
> > "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py",
line
> > 176, in _run
> >     return self.run(*args, **kwargs)
> >   File
> > "/usr/lib/python2.7/dist-packages/samba/netcmd/ntacl.py",
line 239,
> > in run
> >     lp, use_ntvfs=use_ntvfs)
> >   File
> >
"/usr/lib/python2.7/dist-packages/samba/provision/__init__.py", line
> > 1600, in setsysvolacl
> >     passdb=s4_passdb, service=SYSVOL_SERVICE)
> >   File "/usr/lib/python2.7/dist-packages/samba/ntacls.py",
> > line 162, in
> > setntacl
> >     smbd.set_nt_acl(file, security.SECINFO_OWNER |
> > security.SECINFO_GROUP |
> > security.SECINFO_DACL | security.SECINFO_SACL, sd, service=service)
> >
> > root at dc3:/etc/samba# samba-tool dbcheck --cross-ncs
> > --reset-well-known-acls
> > --fix --yes
> > Checking 8601 objects
> > Checked 8601 objects (0 errors)
> >
> > # Global parameters
> > [global]
> >         netbios name = DC3
> >         realm = CAMPUS.EXAMPLE.INTRA
> >         server services = s3fs, rpc, nbt, wrepl, ldap, cldap,
> > kdc, drepl,
> > winbindd, ntp_signd, kcc, dnsupdate
> >         workgroup = CAMPUS
> >         server role = active directory domain controller
> >         idmap_ldb:use rfc2307 = yes
> >         ldap server require strong auth = no
> >
> > [netlogon]
> >         path = /var/lib/samba/sysvol/campus.example.intra/scripts
> >         read only = No
> >
> > [sysvol]
> >         path = /var/lib/samba/sysvol
> >         read only = No
> >
> > Has anyone ever had this problem?
> >
> > --
> > Elias Pereira
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> >
> >
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>


-- 
Elias Pereira

Hai Elias, 

Ok, If you on my apt, why are you not on 4.7.6 now ;-) 

And I would expect to see : 
lsb_release -a
No LSB modules are available.
Distributor ID: Debian
Description:    Debian GNU/Linux 9.4 (stretch)
Release:        9.4
Codename:       stretch

So first, apt-get update && apt-get dist-upgrade -dy && apt-get
upgrade -y && apt-get dist-upgrade -y
People might as why like that. 
1) update
2) download all upgraded files, ( even the one that might need extra packages ) 
3) upgrade as normal.
4) check of the "extra" packages. 

Besides that, now since i normaly dont run samba-tool ntacl sysvolreset.. 
But ! 
For you i did it... I did run : samba-tool ntacl sysvolreset 
After more then a year..  On my production server. Oehh..  
Resulted in : 0 errors.  :-) 

And then i did the following. 
wget
https://raw.githubusercontent.com/thctlo/samba4/master/samba-check-set-sysvol.sh
bash samba-check-set-sysvol.sh 
The output, review it. 

If its ok, set the parameter : APPLY_CHANGES_DIRECT="no" to yes. 
Run it again. 

Done, sysvol works fine. :-) 

You try it, im building packages so i have some "list" time ..  


Greetz, 

Louis



> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Elias Pereira via samba
> Verzonden: woensdag 14 maart 2018 13:52
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] sysvolreset - open: error=40 (Too many 
> levels of symbolic links)
> 
> Hello Louis,
> 
> I use your apt for samba. Great works btw!! :D
> 
> root at dc3:/etc/samba# samba -V
> Version 4.7.3-Debian
> 
> root at dc3:/etc/samba# lsb_release -a
> No LSB modules are available.
> Distributor ID: Debian
> Description: Debian GNU/Linux 9.2 (stretch)
> Release: 9.2
> Codename: stretch
> 
> Did you upgrade, if so, from .. To ...  Samba version ?
> 
> 
> No upgrades.
> 
> And why was running : samba-tool ntacl sysvolreset needed?
> 
> 
> I tried the sysvolreset, as I applied a gpo to a printer 
> deploy, but it did
> not appear to the user. I did as I always did and it worked, 
> but this time
> it failed.
> 
> On Wed, Mar 14, 2018 at 9:32 AM, L.P.H. van Belle via samba <
> samba at lists.samba.org> wrote:
> 
> > Hai,
> >
> > No, i have not seen the (Too many levels of symbolic links) 
>  before..
> >
> > Samba version ? Running on OS ?
> > That might be very handy to know.
> >
> > Did you upgrade, if so, from .. To ...  Samba version ?
> >
> > And why was running : samba-tool ntacl sysvolreset needed?
> >
> >
> >
> > Greetz,
> >
> > Louis
> >
> >
> > > -----Oorspronkelijk bericht-----
> > > Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> > > Elias Pereira via samba
> > > Verzonden: woensdag 14 maart 2018 13:24
> > > Aan: samba
> > > Onderwerp: [Samba] sysvolreset - open: error=40 (Too many
> > > levels of symbolic links)
> > >
> > > hi folks,
> > >
> > > After run *samba-tool ntacl sysvolreset *the below error 
> occurs. I not
> > > remember of make any modification directly on the server. I
> > > only manager
> > > via rsat.
> > >
> > > root at dc3:/etc/samba# samba-tool ntacl sysvolreset
> > > *open: error=40 (Too many levels of symbolic links)*
> > > ERROR(runtime): uncaught exception - (-1073741823,
> > > '{Operation Failed} The
> > > requested operation was unsuccessful.')
> > >   File
> > >
"/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line
> > > 176, in _run
> > >     return self.run(*args, **kwargs)
> > >   File
> > >
"/usr/lib/python2.7/dist-packages/samba/netcmd/ntacl.py",
> line 239,
> > > in run
> > >     lp, use_ntvfs=use_ntvfs)
> > >   File
> > > 
> "/usr/lib/python2.7/dist-packages/samba/provision/__init__.py",
line
> > > 1600, in setsysvolacl
> > >     passdb=s4_passdb, service=SYSVOL_SERVICE)
> > >   File
"/usr/lib/python2.7/dist-packages/samba/ntacls.py",
> > > line 162, in
> > > setntacl
> > >     smbd.set_nt_acl(file, security.SECINFO_OWNER |
> > > security.SECINFO_GROUP |
> > > security.SECINFO_DACL | security.SECINFO_SACL, sd, 
> service=service)
> > >
> > > root at dc3:/etc/samba# samba-tool dbcheck --cross-ncs
> > > --reset-well-known-acls
> > > --fix --yes
> > > Checking 8601 objects
> > > Checked 8601 objects (0 errors)
> > >
> > > # Global parameters
> > > [global]
> > >         netbios name = DC3
> > >         realm = CAMPUS.EXAMPLE.INTRA
> > >         server services = s3fs, rpc, nbt, wrepl, ldap, cldap,
> > > kdc, drepl,
> > > winbindd, ntp_signd, kcc, dnsupdate
> > >         workgroup = CAMPUS
> > >         server role = active directory domain controller
> > >         idmap_ldb:use rfc2307 = yes
> > >         ldap server require strong auth = no
> > >
> > > [netlogon]
> > >         path = /var/lib/samba/sysvol/campus.example.intra/scripts
> > >         read only = No
> > >
> > > [sysvol]
> > >         path = /var/lib/samba/sysvol
> > >         read only = No
> > >
> > > Has anyone ever had this problem?
> > >
> > > --
> > > Elias Pereira
> > > --
> > > To unsubscribe from this list go to the following URL and read
the
> > > instructions:  https://lists.samba.org/mailman/options/samba
> > >
> > >
> >
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> >
> 
> 
> 
> -- 
> Elias Pereira
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>