Problem creating GPO samba4 beta6

Andrew Bartlett abartlet at
Mon Nov 12 18:43:43 MST 2012

On Mon, 2012-11-12 at 19:38 +0100, Dieter Modig wrote:
> Hi! 
> We're back! ;) Since we had no luck with getting GPO:s working for us with samba beta7 we had to put it all on ice (other things need to be broken as well ;) Now that we had a chance to delve into it again there was a RC4 out for us to test against! 
> We've upgraded to RC4 and can't see many problems so far but still no luck with creating new GPO:s (editing old ones - yes but no new ones). Running the suggested ntacl sysvolreset yielded the following error. Suggestions? We can also see that there are others with this exact problem in the mail list. Are you close to any solution or want us to try anything to give more clues? 
> set_nt_acl_no_snum: fset_nt_acl returned NT_STATUS_ACCESS_DENIED. 
> ERROR(runtime): uncaught exception - (-1073741790, 'Access denied') 
> File "/usr/local/samba/lib/python2.6/site-packages/samba/netcmd/", line 175, in _run 
> return*args, **kwargs) 
> File "/usr/local/samba/lib/python2.6/site-packages/samba/netcmd/", line 214, in run 
> lp, use_ntvfs=use_ntvfs) 
> File "/usr/local/samba/lib/python2.6/site-packages/samba/provision/", line 1458, in setsysvolacl 
> setntacl(lp,sysvol, SYSVOL_ACL, str(domainsid), use_ntvfs=use_ntvfs, skip_invalid_chown=True, passdb=s4_passdb) 
> File "/usr/local/samba/lib/python2.6/site-packages/samba/", line 141, in setntacl 
> smbd.set_nt_acl(file, security.SECINFO_OWNER | security.SECINFO_GROUP | security.SECINFO_DACL | security.SECINFO_SACL, sd) 

Are you running samba-tool as root?

Andrew Bartlett

Andrew Bartlett                      
Authentication Developer, Samba Team 

More information about the samba-technical mailing list