[Samba] Error with "samba-tool ntacl get --as-sddl"

Andrew Bartlett abartlet at samba.org
Fri May 27 09:11:53 UTC 2016


On Wed, 2016-05-18 at 00:02 +0100, Miguel Medalha wrote:
> On two Samba 4.4.2/4.4.3 member servers, "samba-tool ntacl get 
> --as-sddl" gives the following error:
> 
> ERROR: Unable to read domain SID from configuration files
> 
> Which configuration files is it referring to?
> 
> Without "--as-sddl" the command gives a correct output.
> 
> It would be nice to get the permissions in sddl format...
> 
> The same command works as expected on two AC DCs.

A very reasonable request.   You might be able to use vfstest (which
isn't normally installed, but is built) with the get_nt_acl command as
a workaround in the interim.

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba






More information about the samba mailing list