[PATCH] Re: [Samba] SYSVOL ACLs and GPOs

[Andrew Bartlett]

On Sun, 2012-10-28 at 15:59 -0200, Luiz Gustavo dos S. Costa wrote:
> Hi Andrew,
> 
> more other error with this patch ... LOL...
> 
> root at samba4:/usr/local/samba # bin/samba-tool ntacl sysvolcheck -d3
> lpcfg_load: refreshing parameters from /usr/local/samba/etc/smb.conf
> params.c:pm_process() - Processing configuration file
> "/usr/local/samba/etc/smb.conf"
> lp_load_ex: refreshing parameters
> Initialising global parameters
> max_open_files: increasing sysctl_max (3405) to minimum Windows limit (16384)
> rlimit_max: increasing rlimit_max (3405) to minimum Windows limit (16384)
> params.c:pm_process() - Processing configuration file
> "/usr/local/samba/etc/smb.conf"
> Processing section "[global]"
> Processing section "[netlogon]"
> Processing section "[sysvol]"
> Processing section "[devel]"
> Processing section "[publico]"
> ldb_wrap open of idmap.ldb
> ERROR(<type 'exceptions.TypeError'>): uncaught exception - (87,
> 'Attribute not found')
>   File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py",
> line 175, in _run
>     return self.run(*args, **kwargs)
>   File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/ntacl.py",
> line 245, in run
>     lp)
>   File "/usr/local/samba/lib/python2.7/site-packages/samba/provision/__init__.py",
> line 1574, in checksysvolacl
>     direct_db_access)
>   File "/usr/local/samba/lib/python2.7/site-packages/samba/provision/__init__.py",
> line 1526, in check_gpos_acl
>     domainsid, direct_db_access)
>   File "/usr/local/samba/lib/python2.7/site-packages/samba/provision/__init__.py",
> line 1473, in check_dir_acl
>     fsacl = getntacl(lp, path, direct_db_access=direct_db_access)
>   File "/usr/local/samba/lib/python2.7/site-packages/samba/ntacls.py",
> line 73, in getntacl
>     xattr.XATTR_NTACL_NAME)

My guess is that one of the files in sysvol doesn't have an NT ACL set. 

bin/samba-tool ntacl sysvolreset

should fix that.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org