[Samba] Gpo issue

[Sam]

also, I'm using a Windows 10 client PC with RSAT tools...

Le 17/02/2016 13:42, Sam a écrit :
> Hi everybody!
>
> I have two samba AD server (  4.2.7-SerNet-Debian-8.wheezy ). I try to 
> make gpo working but I'm facing some problems...
>
> My Samba4 comes from an old windows AD so I have launch these command :
>
> samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix
> samba-tool ntacl sysvolreset ( that take about 10 minutes to complete )
> samba-tool dbcheck --cross-ncs --fix
>
> But the following errors still stay on both servers...
>
> root at S4bis:~# samba-tool dbcheck --cross-ncs --reset-well-known-acls
> Checking 7747 objects
> ERROR: missing GUID component for ipsecOwnersReference in object 
> CN=ipsecISAKMPPolicy{7238523D-70FA-11D1-864C-14A300000000},CN=IP 
> Security,CN=System,DC=ariane,DC=intra - 
> CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP 
> Security,CN=System,CN=System,DC=ariane,DC=intra
> unable to find object for DN 
> CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP 
> Security,CN=System,CN=System,DC=ariane,DC=intra - (No such Base DN: 
> CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP 
> Security,CN=System,CN=System,DC=ariane,DC=intra)
> Not removing dangling forward link
> Please use --fix to fix these errors
> Checked 7747 objects (1 errors)
>
> root at S4bis:~# samba-tool dbcheck --cross-ncs
> Checking 7747 objects
> ERROR: missing GUID component for ipsecOwnersReference in object 
> CN=ipsecISAKMPPolicy{7238523D-70FA-11D1-864C-14A300000000},CN=IP 
> Security,CN=System,DC=ariane,DC=intra - 
> CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP 
> Security,CN=System,CN=System,DC=ariane,DC=intra
> unable to find object for DN 
> CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP 
> Security,CN=System,CN=System,DC=ariane,DC=intra - (No such Base DN: 
> CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP 
> Security,CN=System,CN=System,DC=ariane,DC=intra)
> Not removing dangling forward link
> Please use --fix to fix these errors
> Checked 7747 objects (1 errors)
>
> At the beginning a "samba-tool ntacl sysvolreset" command did it works 
> but not for a long time, the only thing I do after was playing with 
> the RSAT policy tool... then I thinked that was an rsync issue, but 
> now my sysvol replication work well...
> Maybe a stupid question but is there a way to recreate sysvol folders 
> and files?
>
> Thanks for your help!
>
> Sam
>