similar to: Classicupgrade "set_nt_acl_no_snum: fset_nt_acl returned NT_STATUS_INVALID_OWNER"

Hello, I'm testing samba4. I've setup a small samba3+ldap pdc, and then I tried a classicupgrade, but I can't pass step 4 of the howto. ubuntu at samba4:~/samba4$ /usr/local/samba/sbin/samba -V Version 4.1.0pre1-GIT-899cdc4 ubuntu at samba4:~/samba4$ sudo /usr/local/samba/bin/samba-tool domain classicupgrade --realm=example.com --dbdir=/root/samba /root/samba/smb.conf Reading

Hi, I'm practising to do a classicupgrade of my samba3 domain. When I run the upgrade, I get this error : unpack_nt_owners: owner sid mapped to uid 0 idmapping sid_to_xid failed for id[0]=S-1-5-32-544: NT_STATUS_NONE_MAPPED unpack_nt_owners: unable to validate group sid. set_nt_acl_no_snum: fset_nt_acl returned NT_STATUS_INVALID_OWNER. ERROR(runtime): uncaught exception - (-1073741734,

Hi, i have a problem upgrading an old samba 3.5.x to 4.0.9. The upgrade ends with: Setting password for administrator Administrator password has been set to password of user 'root' set_nt_acl_no_snum: fset_nt_acl returned NT_STATUS_INVALID_OWNER. ERROR(runtime): uncaught exception - (-1073741734, 'NT_STATUS_INVALID_OWNER') File

Hi, I found the source of my problem with set_nt_acl_no_snum: fset_nt_acl returned NT_STATUS_INVALID_OWNER (I hope). The problem is dut to winbind. In my ldap tree, I have uid and gid. Why samba 4 don't use theses informations ? In attached file : output of classic-upgrade (debug level 5) I don't want to use winbind. I just want to use pam_ldap or nslcd for have unix information

I have a domain that I upgraded from a Samba 3/LDAP set up about a year ago. I haven't done anything too interesting with it and it's generally been working OK. I attempted to create a new GPO for my domain. From a Win 7 client I get an error "This security ID may not be assigned as the owner of this object". Thinking this was an issue with sysvol acls, I ran "samba-tool

I'm trying to upgrade from samba3 -> 4. I ran this command: WORKDIR=/usr/local/mobius /usr/local/samba/bin/samba-tool domain classicupgrade --dbdir=$WORKDIR/var --use-xattrs=yes --realm=infinityhealthcare.com $WORKDIR/smb.conf but it failed with the error given in this email's subject. What does it mean, and how do I fix it? This is just another is a growing line of errors that

ClassicUpgrade of my samba3 data to samba4 fails, with this error: ERROR(<class 'passdb.error'>): uncaught exception - Unable to get id for sid Full log of the classicupgrade is at the end of this email. Project member on this list, Andrew Barlett, wrote that the issue is probably that my Samba 3 passdb was passable in an NT 4 DC mode, but is actually 'invalid' :

Hi, I am progressing slowly with the migration from Samba3 to Samba4. I have escaped the bug 13060, now I get to: Adding groups Importing groups Group already exists sid=S-1-5-21-1360262076-8766554542-0991298654-513, groupname=Unix Group Users existing_groupname=Domain Users, Ignoring. Committing 'add groups' transaction to disk Adding users Importing users Committing 'add

Hi, I'm trying to setup a domain with two DCs based on 4.0.3. Following some hint, I wanna use glusterfs for the sysvol. Glusterfs it runs nicely. I can set acls on both machines using setfacl and the other one lists them almost immediately with getfacl. But running "samba-tool ntacl sysvolreset is failing badly giving the following error. In a later attempt, without significant

Hi, After making progress with my scripts for software installation (thanks, Rowland!) I am on a bit of a mission to get things working again. I found that permissions on my sysvol share were somehow incorrect (group ownership was root, etc.) so I ran 'samba-tool ntacl sysvolreset'.. however this now fails with the following error. (I'm on Samba 4.5.0) user at dc2:~ $ sudo

Hi, I have installed a virtual testing network consisting of one samba4 PDC (latest git master) and one Windows XP Pro SP3 (fully updated)machine. I have successfully provisioned an AD Domain and joined the XP machine to it. When I run the gpmc on the XP Pro machine and select: Forest: <domain name> -> Domains -> <domain name> -> Group Policy Objects -> Default Domain

Dear all, I've upgraded my Samba 4.1 to Samba 4.2, compiled from source (CentOS 7). Now, if I run samba-tool ntacl sysvolreset, I get this error: set_nt_acl_no_snum: fset_nt_acl returned NT_STATUS_ACCESS_DENIED. Existing GPOs works fine, but if I create a new one, I get ACCESS DENIED when I click Apply. Does anyone have any suggestions? Thanks, Paul -- -----BEGIN PGP PUBLIC KEY BLOCK-----

OK, I've traced this a little further on now. I think I have followed the trail via the following items that call or refer to each other in turn: - python samba-tool ntacl sysvolreset - source3/smbd/pysmbd.c: SMB_VFS_FSET_NT_ACL( fsp, security_info_sent, sd); - source3/include/vfs_macros.h:#define SMB_VFS_FSET_NT_ACL smb_vfs_call_fset_nt_acl - source3/smbd/vfs.c:NTSTATUS

Hello all, I am looking to setup a Samba AD on my NAS. I am currently using the latest version of NAS4Free which has Samba bundled into it already. However, I am getting a very nasty error when I go in to setup the samba service: Initializing... Looking up IPv4 addresses Looking up IPv6 addresses No IPv6 address will be assigned Setting up share.ldb Setting up secrets.ldb Setting up the

On Thu, 6 Jul 2017 12:17:42 +0100 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Thu, 6 Jul 2017 05:27:13 -0500 > Andrew Walker via samba <samba at lists.samba.org> wrote: > > > I'm sorry. I probably should have linked their samba fork: > > https://github.com/freenas/samba You can look at the commits from > > around the time period of

Following the wiki replication guide precisely I got to this step. [root at smb4-2 ~ (master)]# rsync -XAavz --delete-after smb4-1.brockley.harte-lyne.ca:/var/db/samba4/sysvol/ /var/db/samba4/sysvol/ receiving file list ... done ./ brockley.harte-lyne.ca/ . . . brockley.harte-lyne.ca/scripts/ sent 142 bytes received 1,683 bytes 3,650.00 bytes/sec total size is 182 speedup is 0.10 [root at

Hi all! I want to use 'acl group control' setting to delegate privileges to specific administrators. Unfortunately, I'm unable to set the primary group using windows file permissions dialog, I can only add and remove ACL groups. I tried to do this by removing all groups but one from Windows. This doesn't work: the primary group has all privs removed and the extra group is

On Sat, July 11, 2020 04:32, Andrea Venturoli wrote: > On 2020-07-10 14:47, James B. Byrne wrote: >> FreeBSD-12.1p6 IOCage thick jails on ZFS, samba-4.10.15: > > Can you post the smb.conf of both DCs? > > Just out of curiosity, are you also using vfs_zfsacl? Yes. smb.confs DC1 and DC2: /zroot/iocage/jails/smb4-1a/root/usr/local/etc/smb4.conf [root at vhost04 ~ (master)]#

I have two domain controller servers, with samba in version 4.18 On both DCs both the Sysvol share and the subdirectories (including GPOs) have the same permission: getfacl /usr/local/samba/var/lib/samba/sysvol # file: usr/local/samba/var/lib/samba/sysvol # owner: root # group: 3000000 user::rwx user:root:rwx user:3000000:rwx user:3000001:r-x user:3000002:rwx user:3000003:r-x group::rwx

On Mon, 3 Jul 2017 12:23:24 -0400 phillip mobley via samba <samba at lists.samba.org> wrote: > Hello all, > > I am looking to setup a Samba AD on my NAS. I am currently using the > latest version of NAS4Free which has Samba bundled into it already. > > However, I am getting a very nasty error when I go in to setup the > samba service: > > Initializing... >