samba-tool ntacl sysvolreset --use-s3fs failure on samba4.0.0rc1

[Daniele Dario]

Hi Andrew,

On Wed, 2012-10-10 at 23:36 +1100, Andrew Bartlett wrote:
> On Wed, 2012-10-10 at 14:27 +0200, Daniele Dario wrote:
> > Hi Andrew,
> > 
...
> > > > 2. why do I still see that sysvol (and it's subfolders and files)
> > > > getfacl are group:3000007:r-- when 3000007 is not a valid group?
> > > 
> > > If you install nss_winbind you will see what group that is.  It is
> > > probably another group such as group policy admins. 
> 
> > 
> > Would it be possible that the group's assignment was made before to
> > "posixifying" basic AD groups and now I've lost the association?
> 
> Yes. 
> 
> > May I try to modify them removing permissions to the "unmapped" gids and
> > rewrite the right ones?
> 
> That should work, particularly if you didn't change idmap.ldb.
> 
> Andrew Bartlett
> 

no I didn't change idmap.ldb but which are the three groups involved and
with which permissions?

>From what I can see now they were

Group Policy Creator Owners r?x
Enterprise Admins           r?x
3000007                     r??

Who could be 3000007 ?

Again thank you,
Daniele.