search for: aclcheck

I have working through GPO usage and have activated one (single) modifiaction (via RSAT) to the default GPO set provided after provisioning. When I run "samba-tool gpo aclcheck" I am getting the following: root at dc01:~# samba-tool gpo aclcheck ERROR(<type 'exceptions.KeyError'>): uncaught exception - 'No such element' File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 175, in _run return self.run(*args, **kwar...

...[1] "Everyone deserves an award!!" On 2015-06-11 09:17, Bob of Donelson Trophy wrote: > I have working through GPO usage and have activated one (single) > modifiaction (via RSAT) to the default GPO set provided after > provisioning. > > When I run "samba-tool gpo aclcheck" I am getting the following: > > root at dc01:~# samba-tool gpo aclcheck > ERROR(<type 'exceptions.KeyError'>): uncaught exception - 'No such > element' > File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line > 175, in _run &...

G'day Guys, We are running Centos 6.4, samba4.0.10, compiled from tgz. Has anyone come up with this one before? samba-tool gpo aclcheck ERROR(<type 'exceptions.KeyError'>): uncaught exception - 'No such element' File "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/__init__.py", line 175, in _run return self.run(*args, **kwargs) File "/usr/local/samba/lib64/python2.6/site-packa...

I have compiled samba 4.1.7 on CentOS 6.2 32bit, and did the classicupgrade from Samba3 with ldap backend. Everything is working, including GPO. . But this command still shows the error messages: /usr/local/samba/bin/samba-tool gpo aclcheck ERROR(<type 'exceptions.KeyError'>): uncaught exception - 'No such element' File "/usr/local/samba/lib/python2.6/site-packages/samba/netcmd/__init__.py", line 175, in _run return self.run(*args, **kwargs) File "/usr/local/samba/lib/python2.6/s...

On 26/05/2019 19:24, Epsilon Minus via samba wrote: > i don't know if the problem with the command samba-tool gpo aclcheck > is connect with the original problem, but is necesary resolv all > warinings. > > I put de log level = 5 to check the report. > > this is the output: > > > root at DC04:~# samba-tool gpo aclcheck Try it like this: samba-tool gpo aclcheck -UAdministrator Rowland

...an account that should have administrator permissions, I don't have said admin rights. 2) When I attempt to launch the Windows remote server tools, I can select the server, but when I attempt to connect I get the ever popular 'rpc server unavailable'. 3) When I run 'samba-tool gpo aclcheck', I get an uncaught exception error (-1073741705) 'Indicates the ACL structure is is not valid'. Followed, of course, by the unwinding call stack. 4) smbclient //localhost/netlogon -UAdministrator -c 'ls' nets me the message: 'Domain=[ozco] os=[unix] Server=[Samba 4.3.1] NT...

Hi Bob, On 11 June 2015 at 20:38, Bob of Donelson Trophy <bob at donelsontrophy.net> wrote: > I have been carefully experimenting with the various samba-tool gpo > choices and through some Windows GPO testing (command line) things I > found (online searches) all my GPO policies are completing. And my > initial "remove un-used local profiles" is working and has removed

On 26/05/2019 20:18, Epsilon Minus wrote: > The output is different: > root at DC04:~# samba-tool gpo aclcheck -Uadministrator > GENSEC backend 'gssapi_spnego' registered > GENSEC backend 'gssapi_krb5' registered > GENSEC backend 'gssapi_krb5_sasl' registered > GENSEC backend 'spnego' registered > GENSEC backend 'schannel' registered > GENSEC backend...

Hai, ? im running samba 4.2.2 sernet on debian. ? when i run : samba-tool gpo aclcheck -UAdministrator ? im getting : ERROR: Invalid GPO ACL O:DAG:DAD:PAI(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;EA)(A;OICIIO;0x001f01ff;;;CO)(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;SY)(A;OICI;0x001200a9;;;AU)(A;OICI;0x001200a9;;;ED) and it tells me it should be O:DAG:DAD:P? (A;OICI;0x001f0...

El dom., 26 may. 2019 a las 16:12, Rowland penny via samba (<samba at lists.samba.org>) escribió: > > On 26/05/2019 19:24, Epsilon Minus via samba wrote: > > i don't know if the problem with the command samba-tool gpo aclcheck > > is connect with the original problem, but is necesary resolv all > > warinings. > > > > I put de log level = 5 to check the report. > > > > this is the output: > > > > > > root at DC04:~# samba-tool gpo aclcheck > > Try it like this: &...

.../site-packages/samba/provision/__init__.py", line 1794, in check_dir_acl raise ProvisioningError('%s ACL on GPO directory %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), path, fsacl_sddl, acl)) [root at abridor-dc1 Policies]# samba-tool gpo aclcheck -d3 -Uadministrator lpcfg_load: refreshing parameters from /etc/samba/smb.conf GENSEC backend 'gssapi_spnego' registered GENSEC backend 'gssapi_krb5' registered GENSEC backend 'gssapi_krb5_sasl' registered GENSEC backend 'spnego' registered GENSEC backend 'schann...

...see them anymore to read. The biggest problem is that I have created group policies with Microsoft tools but they are not applied. I have looked at sysvol share and I cannot see logon dirs and my scripts so I suppose it is a permission problem. So I have given this command: "samba-tool gpo aclcheck --fix" and it has found around 1700 errors ( I have more than 1000 users). But now permissions are wrong: microsoft tools do not recognize the domain anymore and I cannot browse it anymore with \\domainname.lan\ Help me please!!! What can I do? I forgot to say that I have two domain contr...

...ges/samba/provision/__init__.py", line 1621, in check_dir_acl raise ProvisioningError('%s ACL on GPO directory %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), path, fsacl_sddl, acl)) I also get a not very helpful error from samba-tool gpo aclcheck: #samba-tool gpo aclcheck ERROR(<type 'exceptions.KeyError'>): uncaught exception - 'No such element' File "/usr/lib64/python2.7/site-packages/samba/netcmd/__init__.py", line 176, in _run return self.run(*args, **kwargs) File "/usr/lib64/python2.7/...

El dom., 26 may. 2019 a las 16:34, Rowland penny via samba (<samba at lists.samba.org>) escribió: > > On 26/05/2019 20:18, Epsilon Minus wrote: > > The output is different: > > root at DC04:~# samba-tool gpo aclcheck -Uadministrator > > GENSEC backend 'gssapi_spnego' registered > > GENSEC backend 'gssapi_krb5' registered > > GENSEC backend 'gssapi_krb5_sasl' registered > > GENSEC backend 'spnego' registered > > GENSEC backend 'schannel' regis...

...mode = true' and 'force unknown acl user = true' for service sysvol connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service sysvol continuis... I put de log level = 3 root at DC04:~# samba-tool gpo aclcheck ldb_wrap open of secrets.ldb GENSEC backend 'gssapi_spnego' registered GENSEC backend 'gssapi_krb5' registered GENSEC backend 'gssapi_krb5_sasl' registered GENSEC backend 'spnego' registered GENSEC backend 'schannel' registered GENSEC backend 'naclrpc_as_...

...drivmappings are not working. When we do a "gpupdate /force" we get an errormessage that the "default domain policy" is not working for both the user-GPOs and the machine-GPOs. We checked the permissions with "samba-tool ntacl sysvolcheck" and with "samba-tool gpo aclcheck" and everything is ok no messages. Up to this point we did not do any changes to this GPO. Other PC will work correctly. Then we did a change to the GPO and replicated the GPO to the other DC. After we made the change, the PC will get the drivemappings. We can then reset the GPO, replicate it...

...s.samba.org >Onderwerp: Re: [Samba] samba tool and sysvol/gpo checks >error/bugged? ( but it all works ok) > >On 17/06/15 08:15, L.P.H. van Belle wrote: >> Hai, >> >> im running samba 4.2.2 sernet on debian. >> >> when i run : >> samba-tool gpo aclcheck -UAdministrator >> >> im getting : >> ERROR: Invalid GPO ACL >> >O:DAG:DAD:PAI(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;EA)(A >;OICIIO;0x001f01ff;;;CO)(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f0 >1ff;;;SY)(A;OICI;0x001200a9;;;AU)(A;OICI;0x001200a9;;;ED) >>...

...H. van Belle Onderwerp: Re: [Samba] samba 4.1.13 not applying domain policy in windows XP clients thanx for the reply it seems that the problem reported by samba-tool ntacl sysvolcheck was solved with the sysvolreset command but the problem with root at pdc:/usr/local/samba/bin# ./samba-tool gpo aclcheck ERROR(<type 'exceptions.KeyError'>): uncaught exception - 'No such element' ? File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py", line 175, in _run ??? return self.run(*args, **kwargs) ? File "/usr/local/samba/lib/python2.7/site-package...

...ba/lib/python2.7/site-packages/samba/provision/__init__.py", line 1728, in checksysvolacl raise ProvisioningError('%s ACL on sysvol directory %s %s does not match expected value %s from provision' % (acl_type(direct_db_access), dir_path, fsacl_sddl, SYSVOL_ACL)) # samba-tool gpo aclcheck -U Administrator Password for [DOMAIN\Administrator]: ERROR: Invalid GPO ACL O:LAG:DAD:PAI(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;EA)(A;OICIIO;0x001f01ff;;;CO)(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;SY)(A;OICI;0x001200a9;;;AU)(A;OICI;0x001200a9;;;ED) on path (cbmerj.local\Policies\{F274A...

...an account that should have administrator permissions, I don't have said admin rights. 2) When I attempt to launch the Windows remote server tools, I can select the server, but when I attempt to connect I get the ever popular 'rpc server unavailable'. 3) When I run 'samba-tool gpo aclcheck', I get an uncaught exception error (-1073741705) 'Indicates the ACL structure is is not valid'. Followed, of course, by the unwinding call stack. 4) smbclient //localhost/netlogon -UAdministrator -c 'ls' nets me the message: 'Domain=[ozco] os=[unix] Server=[Samba 4.3.1] NT...