similar to: GPO problem ACL permission

2017-06-06 15:54 GMT-03:00 Rowland Penny via samba <samba at lists.samba.org>: > On Tue, 6 Jun 2017 15:35:42 -0300 > Epsilon Minus via samba <samba at lists.samba.org> wrote: > >> Hi. I have a problem applying GPO. I do not know where to look >> Reviewing I found this: >> >> # samba-tool ntacl sysvolcheck >> lp_load_ex: refreshing parameters

i don't know if the problem with the command samba-tool gpo aclcheck is connect with the original problem, but is necesary resolv all warinings. I put de log level = 5 to check the report. this is the output: root at DC04:~# samba-tool gpo aclcheck INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5

Thanks Elias. But I run samba-tool ntacl sysvolreset and: root at DC02:~# samba-tool ntacl sysvolreset lp_load_ex: refreshing parameters Initialising global parameters Processing section "[global]" Processing section "[netlogon]" Processing section "[sysvol]" Processing section "[sistemas]" ldb_wrap open of idmap.ldb lp_load_ex: refreshing parameters

Hi. I have a problem applying GPO. I do not know where to look Reviewing I found this: # samba-tool ntacl sysvolcheck lp_load_ex: refreshing parameters Initialising global parameters Processing section "[global]" Processing section "[netlogon]" Processing section "[sysvol]" Processing section "[sistemas]" ldb_wrap open of idmap.ldb Module

On 26/05/2019 20:18, Epsilon Minus wrote: > The output is different: > root at DC04:~# samba-tool gpo aclcheck -Uadministrator > GENSEC backend 'gssapi_spnego' registered > GENSEC backend 'gssapi_krb5' registered > GENSEC backend 'gssapi_krb5_sasl' registered > GENSEC backend 'spnego' registered > GENSEC backend 'schannel' registered

On 26/05/2019 19:24, Epsilon Minus via samba wrote: > i don't know if the problem with the command samba-tool gpo aclcheck > is connect with the original problem, but is necesary resolv all > warinings. > > I put de log level = 5 to check the report. > > this is the output: > > > root at DC04:~# samba-tool gpo aclcheck Try it like this: samba-tool gpo aclcheck

This is my smb.conf root at DC02:~# cat /etc/samba/smb.conf # Global parameters [global] workgroup = CLINICAGUEMES realm = CLINICAGUEMES.COM.AR netbios name = DC02 server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate idmap_ldb:use rfc2307 = yes ldap server require strong

Maybe this link help. https://wiki.samba.org/index.php/Updating_Samba#Fixing_Incorrect_Sysvol_and_Directory_ACLs On Tue, Jun 6, 2017 at 4:09 PM, Epsilon Minus via samba < samba at lists.samba.org> wrote: > 2017-06-06 15:54 GMT-03:00 Rowland Penny via samba <samba at lists.samba.org > >: > > On Tue, 6 Jun 2017 15:35:42 -0300 > > Epsilon Minus via samba <samba at

> > onnect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and > 'force unknown acl user = true' for service Unknown Service (snum == -1) > connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and > 'force unknown acl user = true' for service Unknown Service (snum == -1) > lp_load_ex: refreshing

Helllo, I have clean sernet-samba-ad install, and then join to existing domain. When I tried samba-tool ntacl sysvolreset I have ERROR: [root at dc04 ~]# samba-tool ntacl sysvolreset rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) Processing section "[netlogon]" Processing section "[sysvol]" Processing section "[netlogon]" Processing

Hello list, today I update de the version of samba, 4.2.3, when I run this tool, I have this error. 1) - ./samba-tool gpo aclcheck ldb_wrap open of secrets.ldb GENSEC backend 'gssapi_spnego' registered GENSEC backend 'gssapi_krb5' registered GENSEC backend 'gssapi_krb5_sasl' registered GENSEC backend 'spnego' registered GENSEC backend 'schannel' registered

El dom., 26 may. 2019 a las 16:12, Rowland penny via samba (<samba at lists.samba.org>) escribió: > > On 26/05/2019 19:24, Epsilon Minus via samba wrote: > > i don't know if the problem with the command samba-tool gpo aclcheck > > is connect with the original problem, but is necesary resolv all > > warinings. > > > > I put de log level = 5 to check the

ok, I've investigated the problem more closely. First of all, I didn't mention that I have 2 domain controllers: dc(initial) and bdc (backup). Rsync command /usr/bin/rsync -XAavz --delete-after dc:/usr/local/samba/var/locks/sysvol/* /usr/local/samba/var/locks/sysvol/ fires every 5 minutes on bdc. However, if I try to gpupdate from bdc I get the above error. Gpupdating from dc works

El dom., 26 may. 2019 a las 16:34, Rowland penny via samba (<samba at lists.samba.org>) escribió: > > On 26/05/2019 20:18, Epsilon Minus wrote: > > The output is different: > > root at DC04:~# samba-tool gpo aclcheck -Uadministrator > > GENSEC backend 'gssapi_spnego' registered > > GENSEC backend 'gssapi_krb5' registered > > GENSEC backend

Hi, Search on the net but not getting enough information to resolve the issue. As per suggestion to check the sysvol but mine got issues. Currently using CentOS 8.1.1911 and a compiled samba 4.11.4 based on Fedora 31. I tried also to delete the broken GPO policy E4108E65-68AB-4E2D-9A00-A9063B1558E3 but I can't delete it (using samba-tool gpo del {31B2F340-016D-11D2-945F-00C04FB984F9}

I'm trying to upgrade from samba3 -> 4. I ran this command: WORKDIR=/usr/local/mobius /usr/local/samba/bin/samba-tool domain classicupgrade --dbdir=$WORKDIR/var --use-xattrs=yes --realm=infinityhealthcare.com $WORKDIR/smb.conf but it failed with the error given in this email's subject. What does it mean, and how do I fix it? This is just another is a growing line of errors that

Hi, I joined a new samba-4.7 DC to our AD, replicated everything over, then turned off the old DCs, seized fsmo roles, and added two extra 4.7 DCs. Everything above succeeded without warnings, and everything seems to be running very well finally, except for the sysvolcheck / sysvolreset. We're on xfs, and the File System Support checks on the samba wiki page all pass, although at the

Hi My configuration: smb.conf # Global parameters [global] workgroup = MYSERVER realm = interno.mydomain.com.br netbios name = DC-LINUX server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate idmap_ldb:use rfc2307 = yes ldap server

ClassicUpgrade of my samba3 data to samba4 fails, with this error: ERROR(<class 'passdb.error'>): uncaught exception - Unable to get id for sid Full log of the classicupgrade is at the end of this email. Project member on this list, Andrew Barlett, wrote that the issue is probably that my Samba 3 passdb was passable in an NT 4 DC mode, but is actually 'invalid' :

On Tue, 6 Jun 2017 15:35:42 -0300 Epsilon Minus via samba <samba at lists.samba.org> wrote: > Hi. I have a problem applying GPO. I do not know where to look > Reviewing I found this: > > # samba-tool ntacl sysvolcheck > lp_load_ex: refreshing parameters > Initialising global parameters > Processing section "[global]" > Processing section