search for: to_somewhere

On 2017-08-24 13:00, Rowland Penny via samba wrote: > On Thu, 24 Aug 2017 12:41:36 +0200 > Sven Schwedas via samba <samba at lists.samba.org> wrote: > >> On 2017-08-24 12:27, Rowland Penny via samba wrote: >>> On Thu, 24 Aug 2017 12:03:42 +0200 >>> Sven Schwedas via samba <samba at lists.samba.org> wrote: >>> >>>> >>>>

...lists-archives.com/samba/106333-can-t-create-update-group-policy-in-samba-4-6-5.html Note on this last link, the part.: A good tip to restore the defaults with samba-tool without errors. move you domain folder out of the /var/lib/samba/sysvol folder. mv /var/lib/samba/sysvol/intern.domain.tld to_somewhere else. mkdir /var/lib/samba/sysvol/intern.domain.tld <<<<<<<<<< you must have an empty folder for the next command. And run samba-tool ntacl sysvolreset ---- Good luck, if you need more help, you know where to find us. ;-) ( ps, when its all done, DONT run samba...

..., I set up `acl_xattr:ignore system acls = yes` and > restarted the DC. > > > A good tip to restore the defaults with samba-tool without errors. > > > > move you domain folder out of the /var/lib/samba/sysvol folder. > > mv /var/lib/samba/sysvol/intern.domain.tld to_somewhere else. > > mkdir /var/lib/samba/sysvol/intern.domain.tld > <<<<<<<<<< you must have an empty folder for the next command. > > And run samba-tool ntacl sysvolreset > ?and did that. > > Alas: > > > root at graz-dc-1b:/var/lib/samba#...

Hai, In reponse to the why i recommend that. Since this is a "windows" only share, i recomment to set it up for that usage, with results in better matching for windows rights. Resulting in better working policies. The current POSIX rights did not match to my needs and resulted in inconsistant policies. This is why i use these for profiles and sysvol. And this is my setup order:

...is member of BUILDIN\Administrators. ( above is not the samba default but a same setup as on a window 2008R2 server. )   A good tip to restore the defaults with samba-tool without errors.   move you domain folder out of the /var/lib/samba/sysvol folder. mv /var/lib/samba/sysvol/intern.domain.tld to_somewhere else. run samba-tool ntacl sysvolreset   Since there is not domain folder and policies folder, you dont get errors. test with samba-tool ntacl sysvolcheck, if you dont have errors, backup these settings.   getfacl -R /var/lib/samba/sysvol > sysvol.permissions.acl (and a restore option : setfa...

...tarted the > >> DC. > >> > >>> A good tip to restore the defaults with samba-tool > without errors. > >>> > >>> move you domain folder out of the /var/lib/samba/sysvol folder. > >>> mv /var/lib/samba/sysvol/intern.domain.tld to_somewhere else. > >>> mkdir /var/lib/samba/sysvol/intern.domain.tld > >> <<<<<<<<<< you must have an empty folder for the next command. > >>> And run samba-tool ntacl sysvolreset > >> ?and did that. > >> > >> Alas:...

...t;> DC. >>>> >>>>> A good tip to restore the defaults with samba-tool >> without errors. >>>>> >>>>> move you domain folder out of the /var/lib/samba/sysvol folder. >>>>> mv /var/lib/samba/sysvol/intern.domain.tld to_somewhere else. >>>>> mkdir /var/lib/samba/sysvol/intern.domain.tld >>>> <<<<<<<<<< you must have an empty folder for the next command. >>>>> And run samba-tool ntacl sysvolreset >>>> ?and did that. >>>> >...

...trators. > ( above is not the samba default but a same setup as on a window 2008R2 > server. ) > > A good tip to restore the defaults with samba-tool without errors. > > move you domain folder out of the /var/lib/samba/sysvol folder. > mv /var/lib/samba/sysvol/intern.domain.tld to_somewhere else. > run samba-tool ntacl sysvolreset > > Since there is not domain folder and policies folder, you dont get errors. > test with samba-tool ntacl sysvolcheck, if you dont have errors, backup > these settings. > > getfacl -R /var/lib/samba/sysvol > sysvol.permissions.acl &...