[Samba] GPO Create error

[Ryan Bair]

The first version of Samba 4 this domain ran was 4.0.1, so pretty early.

I ran the fixes described on that page (I believe I ran these commands when
I updated to 4.1), but the issues persist.

Sysvol was provisioned with s3fs I believe. Is there a way to verify this?


On Tue, Apr 22, 2014 at 12:40 PM, Marc Muehlfeld <mmuehlfeld at samba.org>wrote:

> Hello Ryan,
>
> Am 21.04.2014 23:30, schrieb Ryan Bair:
>
>  I have a domain that I upgraded from a Samba 3/LDAP set up about a year
>> ago. I haven't done anything too interesting with it and it's generally
>> been working OK.
>>
>> I attempted to create a new GPO for my domain. From a Win 7 client I get
>> an
>> error "This security ID may not be assigned as the owner of this object".
>>
>> Thinking this was an issue with sysvol acls, I ran "samba-tool ntacl
>> sysvolcheck" which exploded with:
>> ERROR(<type 'exceptions.TypeError'>): uncaught exception - (61, 'No data
>> available')
>>    File "/usr/lib64/python2.6/site-packages/samba/netcmd/__init__.py",
>> line
>> 175, in _run
>>      return self.run(*args, **kwargs)
>>    File "/usr/lib64/python2.6/site-packages/samba/netcmd/ntacl.py", line
>> 249, in run
>>      lp)
>>    File "/usr/lib64/python2.6/site-packages/samba/provision/__init__.py",
>> line 1686, in checksysvolacl
>>      fsacl = getntacl(lp, dir_path, direct_db_access=direct_db_access,
>> service=SYSVOL_SERVICE)
>>    File "/usr/lib64/python2.6/site-packages/samba/ntacls.py", line 73, in
>> getntacl
>>      xattr.XATTR_NTACL_NAME)
>>
>> After reading some other peoples experiences I tried doing a sysvolrepair
>> which completed, but did not fix either of the issues.
>>
>> I also tried creating the GPO with "samba-tool gpo create 'New GPO'" which
>> gave an error that smells similar to the error Win 7 GPO Management
>> reported:
>> ERROR(runtime): uncaught exception - (-1073741734,
>> 'NT_STATUS_INVALID_OWNER')
>>    File "/usr/lib64/python2.6/site-packages/samba/netcmd/__init__.py",
>> line
>> 175, in _run
>>      return self.run(*args, **kwargs)
>>    File "/usr/lib64/python2.6/site-packages/samba/netcmd/gpo.py", line
>> 1000,
>> in run
>>      conn.set_acl(sharepath, fs_sd, sio)
>>
>> I'm running 4.1.6-SerNet-RedHat-7.el6 on Centos 6.5.
>>
>> Any ideas where to look next?
>>
>
>
> Is this a setup you have upgraded from an early 4.0 version?
>
> https://wiki.samba.org/index.php/Updating_Samba#Updates_of_
> early_Samba_4_version_on_Samba_Active_Directory_DCs
>
> Even if it's a fresh 4.1 installation, this commands should execut without
> any error.
>
>
> Was your sysvol share provisioned with NTVFS or smb3fs?
>
>
> Regards,
> Marc
>