search for: fsacl_sddl

...l domainsid, direct_db_access) File "/usr/lib64/python2.7/site-packages/samba/provision/__init__.py", line 1628, in check_dir_acl raise ProvisioningError('%s ACL on GPO directory %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), path, fsacl_sddl, acl)) Regards, Min Wai

I get this error when I run samba-tool ntacl sysvolcheck ProvisioningError('%s ACL on GPO directory %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), path, fsacl_sddl, acl)) There are two GPO directories. One is the Default Domain Controllers Policy and one is the Default Domain Policy It looks like it's the Default Domain Policy that's giving me the problem -- the directory name matches the dn and sysvolcheck doesn't mention the other Policy d...

...insid, direct_db_access) File "/usr/local/samba/lib/python2.7/site-packages/samba/provision/__init__.py", line 1630, in check_dir_acl raise ProvisioningError('%s ACL on GPO directory %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), path, fsacl_sddl, acl)) Tried with new domain (no migrated) and then works, where is the problem? 2016-07-21 18:51 GMT+02:00 Marc Muehlfeld <mmuehlfeld at samba.org>: > Hello, > > Am 21.07.2016 um 17:18 schrieb Trenta sis: > > I have migrated samba 3 domain to samba, and I have found that...

...access) File "/usr/local/samba/lib64/python2.6/site-packages/samba/provision/__init__.py", line 1603, in check_dir_acl raise ProvisioningError('%s ACL on GPO file %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), os.path.join(root, name), fsacl_sddl, acl)) -- View this message in context: http://samba.2283325.n4.nabble.com/Command-samba-tool-ntacl-sysvolcheck-tp4668005.html Sent from the Samba - General mailing list archive at Nabble.com.

On Sun, Oct 25, 2020 at 4:24 PM Rowland penny via samba <samba at lists.samba.org> wrote: > Yes, that is what it is designed for. Yes, and yes it does! Thank you!!

..._db_access) File "/usr/lib/python2.7/site-packages/samba/provision/__init__.py", line 1650, in check_dir_acl raise ProvisioningError('%s ACL on GPO directory %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), os.path.join(root, name), fsacl_sddl, acl)) --------------------snip-------------------- The GP container it complains about is the default domain policy. The specific subfolder is empty (!). I checked the ACLs manually and, on first sight, they seem ok to me, the Administrators group owns all folders and files. Anyway, I then ra...

...) File "//usr/local/samba/lib/python2.7/site-packages/samba/provision//__init__.py", line 1640, in check_dir_acl raise ProvisioningError('%s ACL on GPO file %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), os.path.join(root, name), fsacl_sddl, acl)) # samba-tool dbcheck Checking 2591 objects Checked 2591 objects (0 errors) # samba-tool gpo aclcheck ERROR(<type 'exceptions.KeyError'>): uncaught exception - 'No such element' File "//usr/local/samba/lib/python2.7/site-packages/samba/netcmd//__init__.py&quot...

...insid, direct_db_access) File "/usr/local/samba/lib/python3.7/site-packages/samba/provision/__init__.py", line 1786, in check_dir_acl raise ProvisioningError('%s ACL on GPO directory %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), path, fsacl_sddl, acl) Should sysvolreset fix this? Thanks, Chris

...domainsid, direct_db_access) File "/usr/lib64/python2.7/site-packages/samba/provision/__init__.py", line 1593, in check_dir_acl raise ProvisioningError('%s ACL on GPO directory %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), path, fsacl_sddl, acl)) ad-01: ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception - ProvisioningError: DB ACL on GPO directory /srv/samba/sysvol/internal.stmaryscollege.co.uk/Policies/{6AC1786C-016F-11D2-945F-00C04FB984F9} O:LAG:DAD:PAR(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01f...

...domainsid, direct_db_access) File "/usr/lib/python2.7/dist-packages/samba/provision/__init__.py", line 1593, in check_dir_acl raise ProvisioningError('%s ACL on GPO directory %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), path, fsacl_sddl, acl)) Since everything looks so scary, I wanted to verify with you guys, before attempting a 'samba-tool ntacl sysvolreset'... I'm surprised to find permission problems, because 4.1.6 is pretty recent, and I haven't read very much issues like above on the mailinglist lately......

...ess) >> File "/usr/local/samba/lib/python2.7/site-packages/samba/provision/__init__.py", line 1630, in check_dir_acl >> raise ProvisioningError('%s ACL on GPO directory %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), path, fsacl_sddl, acl)) >> >> Tried with new domain (no migrated) and then works, where is the problem? >> >> >> >> 2016-07-21 18:51 GMT+02:00 Marc Muehlfeld <mmuehlfeld at samba.org>: >> >>> Hello, >>> >>> Am 21.07.2016 um 17:18 schrieb Tre...

...l domainsid, direct_db_access) File "/usr/lib64/python2.6/site-packages/samba/provision/__init__.py", line 1621, in check_dir_acl raise ProvisioningError('%s ACL on GPO directory %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), path, fsacl_sddl, acl)) That's nothing new, this was disused here many times. Today, I decided to try script (https://github.com/thctlo/samba4/blob/master/samba-check-set-sysvol.sh) by mr. van Belle and I ended with this error: failed to call wbcSidToUid: WBC_ERR_DOMAIN_NOT_FOUND Could not convert sid S-1-5-3...

...acl domainsid, direct_db_access) File "/usr/lib/python2.7/dist-packages/samba/provision/__init__.py", line 1631, in check_dir_acl raise ProvisioningError('%s ACL on GPO directory %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), path, fsacl_sddl, acl)) - ---------------- Running "samba-tool gpo aclcheck" exits with the following error: - ---------------- ERROR(<type 'exceptions.KeyError'>): uncaught exception - 'No such element' File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", li...

Am 2017-05-23 um 20:16 schrieb Rowland Penny: >> Can I reset that somehow manually? > > If you are adding GPOs, then yes, by never running sysvolreset. I only did that after sysvolcheck failed! And I still get these problems in the GPO-management. I translate via googling: "A processing error occurred collecting data using this base domain controller." this one ?

...direct_db_access) File "/usr/local/samba/lib/python2.7/site-packages/samba/provision/__init__.py", line 1624, in check_dir_acl raise ProvisioningError('%s ACL on GPO directory %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), path, fsacl_sddl, acl)) root at pdc:/usr/local/samba/bin# root at pdc:/usr/local/samba/bin# gpupdate /force bash: gpupdate: command not found ^C ba/bin# root at pdc:/usr/local/samba/bin# ^C root at pdc:/usr/local/samba/bin# ./samba-tool gpo aclcheck ERROR(<type 'exceptions.KeyError'&g...

...domainsid, direct_db_access) File "/usr/lib64/python2.7/site-packages/samba/provision/__init__.py", line 1621, in check_dir_acl raise ProvisioningError('%s ACL on GPO directory %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), path, fsacl_sddl, acl)) I also get a not very helpful error from samba-tool gpo aclcheck: #samba-tool gpo aclcheck ERROR(<type 'exceptions.KeyError'>): uncaught exception - 'No such element' File "/usr/lib64/python2.7/site-packages/samba/netcmd/__init__.py", line 176, in _run...

.../lib/python2.7/site-packages/samba/provision//__init__.py", >> line 1640, in check_dir_acl >> raise ProvisioningError('%s ACL on GPO file %s %s does not match >> expected value %s from GPO object' % (acl_type(direct_db_access), >> os.path.join(root, name), fsacl_sddl, acl)) >> >> # samba-tool dbcheck >> Checking 2591 objects >> Checked 2591 objects (0 errors) >> >> # samba-tool gpo aclcheck >> ERROR(<type 'exceptions.KeyError'>): uncaught exception - 'No such >> element' File >> "/...

...File "/usr/lib64/python2.7/site-packages/samba/provision/__init__.py", >> line 1628, in check_dir_acl >> raise ProvisioningError('%s ACL on GPO directory %s %s does not match >> expected value %s from GPO object' % (acl_type(direct_db_access), path, >> fsacl_sddl, acl)) >> >> Regards, >> Min Wai >> > >

...cess) File "/usr/local/samba/lib64/python2.7/site-packages/samba/provision/__init__.py", line 1631, in check_dir_acl raise ProvisioningError('%s ACL on GPO file %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), os.path.join(root, name), fsacl_sddl, acl)) Also, as suggested in one post, we checked the sysvol ownership and the result is: rw------- 1 root root 421888 Mar 22 21:04 account_policy.tdb -rw------- 1 root root 528384 Apr 20 15:24 registry.tdb -rw------- 1 root root 421888 Mar 22 21:04 share_info.tdb drwxrwx---+ 3 root...

..., dsacl2fsacl(acl, domainsid), lp, File "/usr/lib64/python3.9/site-packages/samba/provision/__init__.py", line 1769, in check_dir_acl raise ProvisioningError('%s ACL on GPO directory %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), path, fsacl_sddl, acl)) Thanks in advance. Best regards, Dave.