[Samba] samba-tool gpo aclcheck error

[Stefan Kania]

Good morning,

now we got a problem with GPOs. If I run "samba-tool gpo aclcheck -k
yes" I got the following errormessage:
----------
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A
process has requested access to an object but has not been granted those
access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line
176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/gpo.py", line
1148, in run
    fs_sd = conn.get_acl(sharepath, security.SECINFO_OWNER |
security.SECINFO_GROUP | security.SECINFO_DACL,
security.SEC_FLAG_MAXIMUM_ALLOWED)

----------
Yes, I did a "kinit" before ;-) and we get it only on one of our two DCs.
I did a "samba-tool ntacl sysvolcheck" with no errormessage on both DCs.
Any help?

Stefan

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba/attachments/20180517/3a0c4e98/signature.sig>