[Samba] samba4 gpo update problem

[Adam Tauno Williams]

On Mon, 2015-04-06 at 08:57 -0400, James wrote:
> On 4/5/2015 3:49 PM, barış tombul wrote:
> > command2: # samba-tool ntacl sysvolreset
> > open: error=2 (No such file or directory)
> > ERROR(runtime): uncaught exception - (-1073741823, 'Undetermined error')
> >   File
> > "/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/__init__.py",
> > line 175, in _run
> >     return self.run(*args, **kwargs)
> >   File
> > "/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/ntacl.py",
> > line 218, in run
> >     lp, use_ntvfs=use_ntvfs)
> >   File
> > "/usr/local/samba/lib64/python2.7/site-packages/samba/provision/__init__.py",
> > line 1616, in setsysvolacl
> >     set_gpos_acl(sysvol, dnsdomain, domainsid, domaindn, samdb, lp,
> > use_ntvfs, passdb=s4_passdb)
> >   File
> > "/usr/local/samba/lib64/python2.7/site-packages/samba/provision/__init__.py",
> > line 1509, in set_gpos_acl
> >     use_ntvfs=use_ntvfs, skip_invalid_chown=True, passdb=passdb,
> > service=SYSVOL_SERVICE)
> >   File "/usr/local/samba/lib64/python2.7/site-packages/samba/ntacls.py",
> > line 154, in setntacl
> >     smbd.set_nt_acl(file, security.SECINFO_OWNER | security.SECINFO_GROUP |
> > security.SECINFO_DACL | security.SECINFO_SACL, sd, service=service)
> > [root at samba2 etc]#
> >
> >
> > 2015-04-05 22:48 GMT+03:00 barış tombul <bbtombul at gmail.com>:
> >
> >> The path for sysvol on my smb.conf file was incorrect. Why, I do not
> >> know.
> >>
> >>
> >> command1:
> >>
> >> #samba-tool ntacl sysvolcheck
> >>
> >>
> >> ERROR(<type 'exceptions.TypeError'>): uncaught exception - (2, 'No such file or directory')
> >>   File "/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/__init__.py", line 175, in _run
> >>     return self.run(*args, **kwargs)
> >>   File "/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/ntacl.py", line 249, in run
> >>     lp)
> >>   File "/usr/local/samba/lib64/python2.7/site-packages/samba/provision/__init__.py", line 1730, in checksysvolacl
> >>     direct_db_access)
> >>   File "/usr/local/samba/lib64/python2.7/site-packages/samba/provision/__init__.py", line 1666, in check_gpos_acl
> >>     direct_db_access=direct_db_access, service=SYSVOL_SERVICE)
> >>   File "/usr/local/samba/lib64/python2.7/site-packages/samba/ntacls.py", line 73, in getntacl
> >>     xattr.XATTR_NTACL_NAME)
> My experience has shown that this error doesn't always indicate the
> sysvol folder is missing. I had permission issues that caused this
> error. Are you able to verify if it's indeed missing? Location may vary
> depending on how you provisioned but try looking here
> '/usr/local/samba/var/locks/sysvol'

If you are using the SerNET packages the sysvol root typically ends up
@ /var/lib/samba/sysvol

You can use "samba-tool ntacl sysvolreset" to reset sysvol permissions.

-- 
Adam Tauno Williams <mailto:awilliam at whitemice.org> GPG D95ED383
Systems Administrator, Python Developer, LPI / NCLA