samba - Apr 2022 - idmap range

Am 14.04.22 um 09:19 schrieb Rowland Penny via samba:
> On Thu, 2022-04-14 at 07:05 +0200, Stefan G. Weichinger via samba
> wrote:
>> Am 14.04.22 um 07:00 schrieb Stefan G. Weichinger:
>>
>>> Found this thread (without solution):
>>>
>>> https://lists.samba.org/archive/samba/2016-September/203261.html
>>
>> Another link: https://bugzilla.samba.org/show_bug.cgi?id=12363
>>
>> although I don't find any dir like "*/locks/sysvol"
> 
> But you should have /var/lib/samba/sysvol
Yep. Applied these setfacl-commands there.

"samba-tool ntacl sysvolreset" fails the same way after that.
> Have you run 'samba-tool dbcheck' and 'samba-tool ldapcmp'
?
"dbcheck" shows 2 NOTEs for old string components, and "0
errors".

fixed the 2 issues with "--fix"

"ldapcmp" : got to learn which parameters to use .. ok, got it.

I get one error:

LdbError for dn CN=SOME USER,OU=CUSTOMER-BENUTZER,DC=CUSTOMER,DC=AT: 
(32, 'LDAP error 32 LDAP_NO_SUCH_OBJECT -  <acl_read: Error retrieving 
instanceType for base. at 
../../source4/dsdb/samdb/ldb_modules/acl_read.c:940> <>')

What to do about that one?
> Did your problems start after adding a GPO ? If so, have you tried
> removing that GPO ?
No. No GPO edited for months. As I wanted to edit one a few weeks ago 
(at the time I started this thread) I saw these errors in RSAT and 
started to dig.

thanks, Stefan

Am 14.04.22 um 11:45 schrieb Stefan G. Weichinger via samba:
> "ldapcmp" : got to learn which parameters to use .. ok, got it.
> 
> I get one error:
> 
> LdbError for dn CN=SOME USER,OU=CUSTOMER-BENUTZER,DC=CUSTOMER,DC=AT: 
> (32, 'LDAP error 32 LDAP_NO_SUCH_OBJECT -? <acl_read: Error
retrieving
> instanceType for base. at 
> ../../source4/dsdb/samdb/ldb_modules/acl_read.c:940> <>')
> 
> What to do about that one?
tried to edit that user to maybe trigger some resync. No success.

"drs showrepl" looks good to me, btw.

Maybe an issue: that user has a german char in its name "?" ... just
in
case that matters.

I don't know if that ldapcmp even relates to my initial issue with 
SYSVOL etc