[PATCH] SYSVOL ACL fixes Re: [PATCH] Fix 'samba-tool ntacl sysvolcheck' failures and remove NT4 compat

Andrew Bartlett abartlet at samba.org
Tue Nov 13 14:46:12 MST 2012

On Tue, 2012-11-13 at 22:15 +0200, Tadas wrote:
> What should have changed?

By removing the 'NT4 ACL compatability' code, ACLs set with 'samba-tool
ntacl' subcommands should be reported correctly to windows clients. 

Without this change, some ACLs would only report back the mapped posix
ACL, which almost certainly would not match the GPO ACL closely enough.

> I compiled master with your patches, but I get the same functionality as
> with samba4rc5. I can read, edit, create, delete GPO, still get error about
> GPO and SYSVOL permissions not matching, still can't edit security
> filtering (I get access denied). Still some clients do not apply GPO
> settings at boot. I get error: The processing of Group Policy failed
> because of lack of network connectivity to a domain controller. (I have
> Always wait for the network at computer startup and logon policy set).

It seems our battle here will continue.

Andrew Bartlett

Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org

More information about the samba-technical mailing list