[Samba] Erro sysvolcheck/sysvolreset

[Carlos A. P. Cunha]

Hi

My configuration:

smb.conf

# Global parameters
[global]
         workgroup = MYSERVER
         realm = interno.mydomain.com.br
         netbios name = DC-LINUX
         server role = active directory domain controller
         server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, 
drepl, winbindd, ntp_signd, kcc, dnsupdate
         idmap_ldb:use rfc2307 = yes
         ldap server require strong auth = no
         ntlm auth = yes
         # Disable Cups
         load printers = no
         printing = bsd
         printcap name = /dev/null
         disable spoolss = yes


[netlogon]
         path = /opt/samba/var/locks/sysvol/interno.mydomain.com.br/scripts
         read only = No

[sysvol]
         path = /opt/samba/var/locks/sysvol
         read only = No

-----

samba -b | grep [S]TATEDIR | awk '{print $NF}'
/opt/samba/var/locks

-----

samba-tool -V
4.6.3

-----

lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 14.04.4 LTS
Release:        14.04
Codename:       trusty

My problem is GPO

samba-tool  ntacl sysvolcheck
ERROR(<type 'exceptions.TypeError'>): uncaught exception - (2, 'No such 
file or directory')
   File 
"/opt/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py", line 
176, in _run
     return self.run(*args, **kwargs)
   File "/opt/samba/lib/python2.7/site-packages/samba/netcmd/ntacl.py", 
line 270, in run
     lp)
   File 
"/opt/samba/lib/python2.7/site-packages/samba/provision/__init__.py", 
line 1723, in checksysvolacl
     direct_db_access)
   File 
"/opt/samba/lib/python2.7/site-packages/samba/provision/__init__.py", 
line 1674, in check_gpos_acl
     domainsid, direct_db_access)
   File 
"/opt/samba/lib/python2.7/site-packages/samba/provision/__init__.py", 
line 1618, in check_dir_acl
     fsacl = getntacl(lp, path, direct_db_access=direct_db_access, 
service=SYSVOL_SERVICE)
   File "/opt/samba/lib/python2.7/site-packages/samba/ntacls.py", line 
81, in getntacl
     xattr.XATTR_NTACL_NAME)

-----

samba-tool  ntacl sysvolreset -d3

lpcfg_load: refreshing parameters from /opt/samba/etc/smb.conf
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
Processing section "[global]"
Processing section "[netlogon]"
Processing section "[sysvol]"
ldb_wrap open of idmap.ldb
lp_load_ex: refreshing parameters
Processing section "[global]"
Processing section "[netlogon]"
Processing section "[sysvol]"
Initialising default vfs hooks
Initialising custom vfs hooks from [/[Default VFS]/]
Initialising custom vfs hooks from [acl_xattr]
Module 'acl_xattr' loaded
Initialising custom vfs hooks from [dfs_samba4]
connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' 
and 'force unknown acl user = true' for service Unknown Service (snum == -1)
Initialising default vfs hooks
Initialising custom vfs hooks from [/[Default VFS]/]
Initialising custom vfs hooks from [acl_xattr]
Initialising custom vfs hooks from [dfs_samba4]
connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' 
and 'force unknown acl user = true' for service Unknown Service (snum == -1)
lp_load_ex: refreshing parameters
Processing section "[global]"
Processing section "[netlogon]"
Processing section "[sysvol]"
ldb_wrap open of idmap.ldb
ldb_wrap open of idmap.ldb
Initialising default vfs hooks
Initialising custom vfs hooks from [/[Default VFS]/]
Initialising custom vfs hooks from [acl_xattr]
Initialising custom vfs hooks from [dfs_samba4]
connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' 
and 'force unknown acl user = true' for service sysvol

unpack_nt_owners: owner sid mapped to uid 0
unpack_nt_owners: group sid mapped to gid 3000000
idmap range not specified for domain '*'
idmap range not specified for domain '*'
idmap range not specified for domain '*'
idmap range not specified for domain '*'
idmap range not specified for domain '*'
idmap range not specified for domain '*'
idmap range not specified for domain '*'
idmap range not specified for domain '*'
Initialising default vfs hooks
Initialising custom vfs hooks from [/[Default VFS]/]
Initialising custom vfs hooks from [acl_xattr]
Initialising custom vfs hooks from [dfs_samba4]
connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' 
and 'force unknown acl user = true' for service sysvol
unpack_nt_owners: owner sid mapped to uid 0
unpack_nt_owners: group sid mapped to gid 3000000

And there is never end ....


Any idea ?


Regards...