[Samba] Failed to prepare gensec: NT_STATUS_INVALID_SERVER_STATE

[Rowland penny]

On 31/03/2021 14:56, Stefan Bellon wrote:
> On Wed, 31 Mar, Rowland penny via samba wrote:
>
>> OK, I 'think' I may know what is going on here with unison and if I
>> am correct, unless we can come up with a fix, we may have to
>> recommend not using unison.
>>
>> O:LAG:BA is:
>> O = owner
>> LA = local Administrator
>> G = group
>> BA = BUILTIN\Administrators
>>
>> I 'think' unison is somehow mapping 'BUILTIN\Administrators' to 'root'
> Ok, so I should be using the osync approach from
> https://wiki.samba.org/index.php/Bidirectional_Rsync/osync_based_SysVol_replication_workaround
> instead of unison?
>
> Greetings,
> Stefan
>
No, it is an artefact of Louis's script, the group on 
/var/lib/samba/sysvol should not be 'root', but Louis's script is 
showing it as such and to get the correct 'name', you will have to set 
up /etc/nsswitch.conf and the winbind links on the DC.

Rowland