[Samba] Gpo issue
Sam
sr42354 at gmail.com
Wed Feb 17 12:42:53 UTC 2016
Hi everybody!
I have two samba AD server ( 4.2.7-SerNet-Debian-8.wheezy ). I try to
make gpo working but I'm facing some problems...
My Samba4 comes from an old windows AD so I have launch these command :
samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix
samba-tool ntacl sysvolreset ( that take about 10 minutes to complete )
samba-tool dbcheck --cross-ncs --fix
But the following errors still stay on both servers...
root at S4bis:~# samba-tool dbcheck --cross-ncs --reset-well-known-acls
Checking 7747 objects
ERROR: missing GUID component for ipsecOwnersReference in object
CN=ipsecISAKMPPolicy{7238523D-70FA-11D1-864C-14A300000000},CN=IP
Security,CN=System,DC=ariane,DC=intra -
CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP
Security,CN=System,CN=System,DC=ariane,DC=intra
unable to find object for DN
CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP
Security,CN=System,CN=System,DC=ariane,DC=intra - (No such Base DN:
CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP
Security,CN=System,CN=System,DC=ariane,DC=intra)
Not removing dangling forward link
Please use --fix to fix these errors
Checked 7747 objects (1 errors)
root at S4bis:~# samba-tool dbcheck --cross-ncs
Checking 7747 objects
ERROR: missing GUID component for ipsecOwnersReference in object
CN=ipsecISAKMPPolicy{7238523D-70FA-11D1-864C-14A300000000},CN=IP
Security,CN=System,DC=ariane,DC=intra -
CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP
Security,CN=System,CN=System,DC=ariane,DC=intra
unable to find object for DN
CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP
Security,CN=System,CN=System,DC=ariane,DC=intra - (No such Base DN:
CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP
Security,CN=System,CN=System,DC=ariane,DC=intra)
Not removing dangling forward link
Please use --fix to fix these errors
Checked 7747 objects (1 errors)
At the beginning a "samba-tool ntacl sysvolreset" command did it works
but not for a long time, the only thing I do after was playing with the
RSAT policy tool... then I thinked that was an rsync issue, but now my
sysvol replication work well...
Maybe a stupid question but is there a way to recreate sysvol folders
and files?
Thanks for your help!
Sam
More information about the samba
mailing list