[Samba] sysvol access permission problems.

Peter Boos
Thu, 11 Mar 2021 11:04:10 -0000

Hello,
I got an issue with sysvol.
What i'm trying to do is to manually copy the sysvol content of adc1 to dc1

If i try to view permissions (using windows explorer)
It goes ok on adc1 but explorer.exe crashes on dc1 when viewing permissions

I've used (as domain admin) windows robocopy from client pc to copy with
permissions, no succes.
Then configured boot roots to trust eachother using cert-keys
  Then i tried to use rsync, no success
  Then used mc, connected to remote shell copied with attributes still, no
succes.
  Collegae tried a nfs mount as root with acl enabled, no succes.

How can i copy over policies with permissions?
Is there some fixing command to set permissions properly for sysvol ?
  (As i begin to doubt if the permissions are set ok)


//not working on dc1, explorer.exe crashes on :

root at DC1:/var/lib/samba/sysvol/xxxxxxx/Policies# getfacl .
# file: .
# owner: 3000000
# group: 10003
user::rwx
group::r-x
group:10003:r-x
group:3000000:rwx
mask::rwx
other::r-x
default:user::rwx
default:user:3000000:rwx
default:group::r-x
default:group:10003:r-x
default:mask::rwx
default:other::r-x


//working on adc1, though starting to doubt if its ok

root at adc1:/var/lib/samba/sysvol/xxxxxxx/Policies# getfacl .
# file: .
# owner: root
# group: 544
user::rwx
user:root:rwx
user:3000000:r-x
user:3000001:rwx
user:3000011:r-x
user:3000014:rwx
group::rwx
group:544:rwx
group:3000000:r-x
group:3000001:rwx
group:3000011:r-x
group:3000014:rwx
mask::rwx
other::---
default:user::rwx
default:user:root:rwx
default:user:3000000:r-x
default:user:3000001:rwx
default:user:3000011:r-x
default:user:3000014:rwx
default:group::---
default:group:544:rwx
default:group:3000000:r-x
default:group:3000001:rwx
default:group:3000011:r-x
default:group:3000014:rwx
default:mask::rwx
default:other::---


kind regards
Peter