[Samba] SYSVOL ACLs and GPOs

[Jeremy Allison]

On Tue, Oct 30, 2012 at 11:00:31AM +1100, Andrew Bartlett wrote:
> > > be a particular trigger - but it shouldn't be able to make a
> > > modification that doesn't go via vfs_acl_xattr.
> > > 
> > > For Alex, before running the Group Policy tools on WinXP, he gets (at
> > > level 10 on samba-tool ntacl sysvolcheck):
> > > 
> > > get_nt_acl_internal: blob hash matches for
> > > file /root/samba_test/build_master/var/locks/sysvol/realm.com/Policies/{6AC1786C-016F-11D2-945F-00C04FB984F9}
> > > 
> > > then after, he gets:
> > > 
> > > get_nt_acl_internal: blob hash does not match for
> > > file /root/samba_test/build_master/var/locks/sysvol/realm.com/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9} - returning file system SD mapping.
> > 
> > Is this message from smbd, or from samba-tool ?
> 
> That's what vfs_acl_common is printing, being run from samba-tool ntacl
> sysvolcheck.  It links to the VFS layer.

So this looks like it's running the Group Policy tools on WinXP
that causes the problem ?

Can we get a debug level 10 log of that activity going on
against smbd ?

Jeremy.