[PATCH] Re: [Samba] SYSVOL ACLs and GPOs

[Luiz Gustavo dos S. Costa]

Hi Andrew,

more other error with this patch ... LOL...

root at samba4:/usr/local/samba # bin/samba-tool ntacl sysvolcheck -d3
lpcfg_load: refreshing parameters from /usr/local/samba/etc/smb.conf
params.c:pm_process() - Processing configuration file
"/usr/local/samba/etc/smb.conf"
lp_load_ex: refreshing parameters
Initialising global parameters
max_open_files: increasing sysctl_max (3405) to minimum Windows limit (16384)
rlimit_max: increasing rlimit_max (3405) to minimum Windows limit (16384)
params.c:pm_process() - Processing configuration file
"/usr/local/samba/etc/smb.conf"
Processing section "[global]"
Processing section "[netlogon]"
Processing section "[sysvol]"
Processing section "[devel]"
Processing section "[publico]"
ldb_wrap open of idmap.ldb
ERROR(<type 'exceptions.TypeError'>): uncaught exception - (87,
'Attribute not found')
  File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py",
line 175, in _run
    return self.run(*args, **kwargs)
  File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/ntacl.py",
line 245, in run
    lp)
  File "/usr/local/samba/lib/python2.7/site-packages/samba/provision/__init__.py",
line 1574, in checksysvolacl
    direct_db_access)
  File "/usr/local/samba/lib/python2.7/site-packages/samba/provision/__init__.py",
line 1526, in check_gpos_acl
    domainsid, direct_db_access)
  File "/usr/local/samba/lib/python2.7/site-packages/samba/provision/__init__.py",
line 1473, in check_dir_acl
    fsacl = getntacl(lp, path, direct_db_access=direct_db_access)
  File "/usr/local/samba/lib/python2.7/site-packages/samba/ntacls.py",
line 73, in getntacl
    xattr.XATTR_NTACL_NAME)



My system (running in a Virtualbox VM - but, i have phisical servers
with samba4 for test):

root at samba4:/usr/local/samba # uname -a
FreeBSD samba4.ad.mundounix.com.br 9.1-RC2 FreeBSD 9.1-RC2 #0 r241106:
Mon Oct  1 18:26:44 UTC 2012
root at farrell.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  amd64

root at samba4:/usr/local/samba # mount
/dev/mirror/raiz on / (ufs, local, journaled soft-updates, acls)
devfs on /dev (devfs, local, multilabel)
/dev/gvinum/devel on /samba/devel (ufs, local, journaled soft-updates, acls)
/dev/gvinum/publico on /samba/publico (ufs, local, journaled soft-updates, acls)

root at samba4:/usr/local/samba # cat /etc/fstab
/dev/mirror/swap        none    swap    sw      0       0
/dev/mirror/raiz        /       ufs     rw,acls 1       1
# shares samba
/dev/gvinum/devel       /samba/devel    ufs     rw,acls 2       2
/dev/gvinum/publico     /samba/publico  ufs     rw,acls 2       2

root at samba4:/usr/local/samba # getfacl var/locks/sysvol
# file: var/locks/sysvol
# owner: root
# group: 3000000
user::rwx
user:root:rwx
group::r--
group:3000000:r--
group:3000001:r--
group:3000002:r--
group:3000003:r--
mask::rwx
other::---

smb.conf -> http://tny.cz/07d65537

PS: winbind not working in freebsd


2012/10/28 Andrew Bartlett <abartlet at samba.org>:
> On Sat, 2012-10-27 at 12:25 -0200, Luiz Gustavo dos S. Costa wrote:
>> Hi Andrew,
>>
>> not work this patch, now, other error, see below:
>
> Did you try the other patch I posted under:
>
> [PATCH] Fix getfacl behaviour on FreeBSD
>
> Otherwise, if you can tell me how to get xattr file system support on
> FreeBSD 8.2 or 9.0 then I can probably debug this here.
>
> Andrew Bartlett
>
> --
> Andrew Bartlett                                http://samba.org/~abartlet/
> Authentication Developer, Samba Team           http://samba.org
>
>