[Samba] idmap range

Stefan G. Weichinger
Thu, 14 Apr 2022 09:45:47 -0000

Am 14.04.22 um 09:19 schrieb Rowland Penny via samba:
> On Thu, 2022-04-14 at 07:05 +0200, Stefan G. Weichinger via samba
> wrote:
>> Am 14.04.22 um 07:00 schrieb Stefan G. Weichinger:
>>
>>> Found this thread (without solution):
>>>
>>> https://lists.samba.org/archive/samba/2016-September/203261.html
>>
>> Another link: https://bugzilla.samba.org/show_bug.cgi?id=12363
>>
>> although I don't find any dir like "*/locks/sysvol"
>
> But you should have /var/lib/samba/sysvol

Yep. Applied these setfacl-commands there.

"samba-tool ntacl sysvolreset" fails the same way after that.

> Have you run 'samba-tool dbcheck' and 'samba-tool ldapcmp'
?

"dbcheck" shows 2 NOTEs for old string components, and "0
errors".

fixed the 2 issues with "--fix"

"ldapcmp" : got to learn which parameters to use .. ok, got it.

I get one error:

LdbError for dn CN=SOME USER,OU=CUSTOMER-BENUTZER,DC=CUSTOMER,DC=AT:
(32, 'LDAP error 32 LDAP_NO_SUCH_OBJECT -  <acl_read: Error retrieving
instanceType for base. at
../../source4/dsdb/samdb/ldb_modules/acl_read.c:940> <>')

What to do about that one?

> Did your problems start after adding a GPO ? If so, have you tried
> removing that GPO ?

No. No GPO edited for months. As I wanted to edit one a few weeks ago
(at the time I started this thread) I saw these errors in RSAT and
started to dig.

thanks, Stefan