[Samba] Failure gpupdate

[mathias dufresne]

Just waking from my nap but several things:
A - I believe I read several times it is not advised to use ".local" as top
level domain.
B - samba-tool should not segfault during sysvolreset
C - most generally GPO update issue are linked to access rights of user or
computer accessing the share or the file(s).

I wouldn't bother for now about the A.
I would solve the segfault first (B).
Finally once Samba is working fully again (including sysvolreset I mean) I
would have a look on rights (issue on rights when accessing GPO folder
seems to happen mainly when several DC are involved).


2016-10-05 14:05 GMT+02:00 Ricardo Pardim Claus via samba <
samba at lists.samba.org>:

> Colleagues,
>
> I come to seek help to solve this problem. I use Samba 4.4.5.
> I'm getting errors when running gpupdate / force on local desktops.
> I get the following error:
>
> User policy could not be updated successfully. The following errors were
> encountered:
>
>
> The processing of Group Policy failed. Windows could not apply the
> registry-based policy settings for the Group Policy object
> LDAP://CN=User,CN={31B2F340-016D-11D2-945F-00C04FB984F9},
> CN=Policies,CN=System,DC=domain,DC=local. Group Policy settings will not
> be resolved until this event is resolved. View the event details for more
> information on the file name and path that caused the failure.
> The following warnings were encountered during user policy processing:
>
> Windows failed to apply the Scripts settings. Scripts settings might have
> its own log file. Please click on the "More information" link.
> Computer policy could not be updated successfully. The following errors
> were encountered:
>
> The processing of Group Policy failed. Windows could not apply the
> registry-based policy settings for the Group Policy object
> LDAP://CN=Machine,CN={31B2F340-016D-11D2-945F-
> 00C04FB984F9},CN=Policies,CN=System,DC=domain,DC=local. Group Policy
> settings will not be resolved until this event is resolved. View the event
> details for more information on the file name and path that caused the
> failure.
>
> In the Samba log I see this error:
>
> Oct  5 08:32:53 srv14 smbd_audit: DOMAIN\VMWIN10_|172.16.16.158|sysvol|3000019|stat|fail
> (File or directory not found)|domain.local/Policies/{
> 0F5704BA-11D0-4D46-A138-34A085A4E44D}/gpt.ini
> Oct  5 08:32:54 srv14 smbd_audit: DOMAIN\iuser|172.16.16.158|sysvol|users|stat|fail
> (File or directory not found)|domain.local/Policies/{
> 7E0FAD97-3DFB-4C01-B35F-5EB3FD63E371}/gpt.ini
>
>
> I checked the directory and confirmed that the file exists.
>
>
> Already I tried to reset the Sysvol, but I get this error:
>
> # samba-tool ntacl sysvolreset -d3
> lpcfg_load: refreshing parameters from /usr/local/samba/etc/smb.conf
> lp_load_ex: refreshing parameters
> Initialising global parameters
> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
> Processing section "[global]"
> Processing section "[netlogon]"
> Processing section "[sysvol]"
> ldb_wrap open of idmap.ldb
> lp_load_ex: refreshing parameters
> Processing section "[global]"
> Processing section "[netlogon]"
> Processing section "[sysvol]"
> Initialising default vfs hooks
> Initialising custom vfs hooks from [/[Default VFS]/]
> Initialising custom vfs hooks from [full_audit]
> Module 'full_audit' loaded
>
> Segmentation fault (core of the recorded image)
>
> Could someone help me?
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba