Problem creating GPO samba4 beta6

[Andrew Bartlett]

On Mon, 2012-11-12 at 19:38 +0100, Dieter Modig wrote:
> Hi! 
> 
> We're back! ;) Since we had no luck with getting GPO:s working for us with samba beta7 we had to put it all on ice (other things need to be broken as well ;) Now that we had a chance to delve into it again there was a RC4 out for us to test against! 
> 
> We've upgraded to RC4 and can't see many problems so far but still no luck with creating new GPO:s (editing old ones - yes but no new ones). Running the suggested ntacl sysvolreset yielded the following error. Suggestions? We can also see that there are others with this exact problem in the mail list. Are you close to any solution or want us to try anything to give more clues? 
> 
> set_nt_acl_no_snum: fset_nt_acl returned NT_STATUS_ACCESS_DENIED. 
> ERROR(runtime): uncaught exception - (-1073741790, 'Access denied') 
> File "/usr/local/samba/lib/python2.6/site-packages/samba/netcmd/__init__.py", line 175, in _run 
> return self.run(*args, **kwargs) 
> File "/usr/local/samba/lib/python2.6/site-packages/samba/netcmd/ntacl.py", line 214, in run 
> lp, use_ntvfs=use_ntvfs) 
> File "/usr/local/samba/lib/python2.6/site-packages/samba/provision/__init__.py", line 1458, in setsysvolacl 
> setntacl(lp,sysvol, SYSVOL_ACL, str(domainsid), use_ntvfs=use_ntvfs, skip_invalid_chown=True, passdb=s4_passdb) 
> File "/usr/local/samba/lib/python2.6/site-packages/samba/ntacls.py", line 141, in setntacl 
> smbd.set_nt_acl(file, security.SECINFO_OWNER | security.SECINFO_GROUP | security.SECINFO_DACL | security.SECINFO_SACL, sd) 

Are you running samba-tool as root?

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org