[Samba] Samba as AD-Controller: unable to update policies and call start scripts

[Sébastien Le Ray]

Did you try a samba-tool ntacl sysvolreset on the DC? (actually… that 
almost never fixed anything in my case but why not)

You can also dig in the Windows events log which could give you a more 
detailed error

Regards

Le 08/04/2016 09:38, Luca Bertoncello a écrit :
> Zitat von Sébastien Le Ray <sebastien-samba at orniz.org>:
>
>>> The very strange thing is, that gpupdate tries to copy somethings 
>>> from \\cch.intra\sysvol and not from \\dc1\sysvol...
>>> There a no server with name cch.intra, this is just the Realm...
>>
>> Thats expected. your.realm should resolve to all your DC in a 
>> round-robin fashion.
>
> OK, I didn't know that... Thansk!
>
>> Please paste the output of dig cch.intra (or nslookup on a windows box)
>
> From the DC (Ubuntu 14.04):
>
> root at dc1:~# dig cch.intra
>
> ; <<>> DiG 9.9.5-3ubuntu0.8-Ubuntu <<>> cch.intra
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47849
> ;; flags: qr aa rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, 
> ADDITIONAL: 0
>
> ;; QUESTION SECTION:
> ;cch.intra.                     IN      A
>
> ;; ANSWER SECTION:
> cch.intra.              900     IN      A       192.168.50.2
>
> ;; Query time: 0 msec
> ;; SERVER: 127.0.0.1#53(127.0.0.1)
> ;; WHEN: Fri Apr 08 09:36:39 CEST 2016
> ;; MSG SIZE  rcvd: 43
>
> from a Windows PC:
>
> nslookup cch.intra
> Server:  dc1.cch.intra
> Address:  192.168.50.2
>
> Name:    cch.intra
> Address:  192.168.50.2
>
> Of course, the IP of the AD-Controller is 192.168.50.2...
>
> Thanks
> Luca Bertoncello
> (lucabert at lucabert.de)
>
>