similar to: Missing Policies directory -> how to recreate it?

Am 24.11.2015 um 17:48 schrieb Andrey Repin: > samba-tool ntacl sysvolreset > > That should hopefully recreate the structure. sysvolreset doesn't re-create the content. It resets the ACLs. Regards, Marc

Greetings, mathias dufresne! > As I'm dumb, last time I played to update Samba version I forgot to keep a > copy Policies directory in $samba_dir/sysvol/$samba_domain_name/. > Is there any command to rebuild that directory with default policies? > If there is not, are the IDs of default policies are always the same or > samba generates this IDs? If they are always the same I

Dear Samba List! Long story short and please just don't ask; if it were up to me this would have not happened: I need to recreate the default GPO-s (as in the \SysVol\domain.of\Policies\ folder and subfolders) of my domain. Trying to delete the old GPO-s I run into errors, both in the windows mmc and on the dc with runing samba-tools as root. ERROR(ldb): uncaught exception - LDAP error 50

So the GPO Management Tool works under Windows 8.1 for you? On Tue, Nov 24, 2015 at 3:11 AM, mourik jan c heupink <heupink at merit.unu.edu > wrote: > > > On 24-11-2015 0:29, Jeff Dickens wrote: > >> On the Samba side the only thing I see in the logs are some complaints >> about not being able to load the printer list. >> > That probably not related. >

Hi all, Thank you for your replies. I did tried sysvolreset and it does not recreated Policies directory and both default policies inside. To get back these policies I grab them from another domain, a blank one. In the meantime I installed another blank domain to check policies IDs: one these both domains the two default policies had same IDs: {31B2F340-016D-11D2-945F-00C04FB984F9} and

To see which DC is used by Windows client: open a MSDOS console, type "set", look for LOGONSERVER=\\<your_dc> <your_dc> is the DC used to connect on. If issue comes from one DC I would have on sysvol synchronisation between DC, ACL on all sysvol, DNS entries (but I don't think that's a DNS issue if you have only GPO issue). 2016-03-29 14:51 GMT+02:00 Sébastien Le

Am 13.01.2015 um 21:50 schrieb James: > Have you tried to reset the permissions? > > samba-tool ntacl sysvolreset If he lost folders, as he said, sysvolreset won't help. This command wont recreate the sysvol content. > On 1/13/2015 3:09 PM, "Gergely, Kasz?s" wrote: >> I need to recreate the default GPO-s (as in the >> \SysVol\domain.of\Policies\ folder and

Complete event id of : > But still, events log show a warning about kerberos ticket from LsaSrv > source and right after a permission denied on GPT.ini And a getfacl of the problem GPO SID please, i'll check. And a output of ipconfig /all on the problem pc. And question, dedicated IP or dhcp IP? Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba

2015.01.14. 15:48 keltez?ssel, Marc Muehlfeld ?rta: > Am 14.01.2015 um 11:18 schrieb "Gergely, Kasz?s": >>> If you just lost your sysvol folder content, restore the files from >>> your backup or copy them from an additional DC in the domain + run >>> 'samba-tool ntacl sysvolreset'. >> Yes if the site would have backups or a second DC this

On 29/06/16 16:01, Achim Gottinger wrote: > Did you have an chance to look at your method for replication yet > Rowland? > > Am 27.06.2016 um 14:44 schrieb Rowland penny: >>> Thank you for the test. Do you run samba-tool ntacl sysvolreset >>> after rsync on dc2? >> >> This may be where the problems come in, let me look into this and >> report back

On 26/06/16 12:43, Achim Gottinger wrote: > Created an feature request > > "add resolving for well known security principals" > > https://bugzilla.samba.org/show_bug.cgi?id=11997 > > Am 25.06.2016 um 12:35 schrieb Achim Gottinger: >> >> >> Am 25.06.2016 um 02:21 schrieb Achim Gottinger: >>> >>> >>> Am 24.06.2016 um 23:16

Ok, where your pc's get the DNS info from? Server : AD-DC + DNS Or Server : AD-DC + Some other server with DNS Can you give the output of dig NS your.domain.tld and tel us what what is. > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Sébastien Le Ray > Verzonden: dinsdag 29 maart 2016 16:31 > Aan: samba at

Am 30.06.2016 um 12:00 schrieb mathias dufresne: > Sorry to ask that but this thread is quite long and that makes > understanding difficult, at least to me. What is the status of all that? I > believe at one moment it was writtent using winbindd is solution, that with > winbindd instead of winbind we don't need to synchronize idmap.ldb to get > GPOs working well even with

I'm not an expert in idmap (at all in fact :p) but I thought idmap stuffs were here to replace RFC2307 UID/GID declared into AD/LDAP objects. In others words, if you configure correctly idmap into smb.conf I expect you don't need any more declaring UID/GID for machine accounts. Anyway here my machines get access to their GPO: I tested one computer's GPO this morning, the one giving

I found this one. Check which one works for you. http://www.eventid.net/display-eventid-40960-source-LSASRV-eventno-8508-phase-1.htm Im sure this is not a samba configuration problem. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens L.P.H. van Belle > Verzonden: dinsdag 29 maart 2016 16:18 > Aan: samba at

I hate 'me too' replies - but I have also been struggling with this for some years in my multi-DC environment. (yes, replicated sysvol via lsyncd + rsync; permissions looked identical via getfacl last time I checked). Sometimes a client machine will run gpupdate just fine; other times it will fail, seemingly randomly. My next step was going to be to run wireshark on a client machine to

I have hollowed these instructions. https://github.com/thctlo/samba4/blob/master/full-howto-Ubuntu18.04-samba-AD_DC.txt My normal domain is company.com. For the Samba domain it is msi.company.com. DNS is working. I ran these commands. host -t SRV _ldap._tcp.msi.company.com. _ldap._tcp.msi.company.com has SRV record 0 100 389 dc0.msi.company.com. host -t SRV _kerberos._udp.msi.company.com.

Hi everybody. One month ago me migrated from samba 3.6 classic domain to samba4. After solving some minor problems, we have found ourselves with a ACL corruption and we don't know how to deal with this. When accesing to our sysvol shared (for example, \\domain.local\sysvol) from both Samba or Windows clients, we are refused to connect. Domain=[VECTORSF] OS=[Unix] Server=[Samba 4.1.4]

On 6/22/2017 9:41 AM, Anantha Raghava via samba wrote: > Hi, > > No solutions to get out of this? > Not sure exactly what your issue is but based on your error Samba is reporting the following on that particular Policy; * Lost Allow Object and Container inheritance on each ACE. * Create Owner missing ACE and you have Built in Administrators with an ACE * You have the

Zitat von Sébastien Le Ray <sebastien-samba at orniz.org>: >> The very strange thing is, that gpupdate tries to copy somethings >> from \\cch.intra\sysvol and not from \\dc1\sysvol... >> There a no server with name cch.intra, this is just the Realm... > > Thats expected. your.realm should resolve to all your DC in a > round-robin fashion. OK, I didn't