[Samba 4] Access to GPO failed

[Son Nguyen]

Kenneth MacDonald wrote:
> On Mon, 2008-12-08 at 17:50 +0700, Son Nguyen wrote:
>   
>> Kenneth MacDonald wrote:
>>     
>>> On Mon, 2008-12-08 at 10:37 +0700, Son Nguyen wrote:
>>>   
>>>       
>>>> Hi all,
>>>>     I've just finished testing this feature this morning with new version.
>>>> version.h: 
>>>> #define SAMBA_VERSION_GIT_COMMIT_DATE "Sun Dec 7 21:30:36 2008 +0100"
>>>> #define SAMBA_VERSION_STRING "4.0.0alpha6-GIT-e3eb94e"
>>>>  
>>>> Running samba in single mode. Command start:
>>>>
>>>>     * samba -i -M single
>>>>     * samba -M single
>>>>
>>>>  In these two cases, Windows client can join domain success but cannot 
>>>> access Group Policy Editor from dsa.msc.
>>>>
>>>>     * The error message in client is the same as the older:
>>>>           o Fail to open the Group Policy Object. You may not have
>>>>             appropriate rights.
>>>>             Details:
>>>>             The network path was not found.
>>>>     *  From windows client, I can access to the //dc.domain/sysvol success
>>>>     * The below is smb.log when I run samba in debug level 10
>>>>       (samba -M single -d 10)
>>>>
>>>> Do you have any ideas for me to pass this step. I really want to test 
>>>> domain policy but I stuck in this step for more than 2 weeks.
>>>>     
>>>>         
>>> Can you access //dc.domain/sysvol/Policies ?  Can you create directories
>>> in there?
>>>   
>>>       
>> Yes, I can. When access //dc.domain/sysvol/Policies folder with 
>> administrator account (I have not tested with other accounts), I can 
>> create files and folders
>>     
>>> When you create a GPO, the GPT (Group Policy Template) is created
>>> in //dc.domain/sysvol/Policies/{GUID-OF-GPO}/
>>>   
>>>       
>> When I create a new GPO, the will be a new folder named {GUID-OF-GPO} in 
>> Policies folder. The contain of this folder as below:
>>
>>     * GTP.ini:
>>       [General]
>>       Version=0
>>     * Machine: empty folder
>>     * User: empty folder
>>
>>     
>>> Cheers,
>>>
>>> Kenny.
>>>
>>>   
>>>       
>> The attachment is a archive file for a new folder was generated when I 
>> create new GPO.
>> The same error message was appeared when I try to edit the Default 
>> Domain Policy.
>> I'm looking forward for your response.
>>     
>
> I don't have any further insight.  I was trying to clarify what had and
> hadn't happened.
>
> Cheers,
>
> Kenny.
>   
This is my installation process:

    * Operating system: CentOS-5.2 (with ext3 file system)
    * Lib installtion (from OS DVD):
      'Development Tools'
      *gcc* *make* *acl* *attr* *readline* *python*
    * Samba4 installation and provision as Wiki
    * DNS: using bind-chroot-9.3

Hoping these information is useful for you to identify my problem.

Thanks a lot,
Son Nguyen