[Samba] More on sysvol maintenance

[Luis Peromarta]

I guess my Policies folder are not quite as they should be:

root at bwing:/var/lib/samba/sysvol# ll -R
.:
total 20K
8.0K drwxrwx---+  3 root BUILTIN\administrators 4.0K May 17 09:43 .
4.0K drwxr-xr-x  10 root root                   4.0K May 24 17:16 ..
8.0K drwxrwx---+  4 root BUILTIN\administrators 4.0K Nov  7  2022 mad.mater.int

./mad.mater.int:
total 32K
8.0K drwxrwx---+  4 root BUILTIN\administrators 4.0K Nov  7  2022 .
8.0K drwxrwx---+  3 root BUILTIN\administrators 4.0K May 17 09:43 ..
8.0K drwxrwx---+ 26 root BUILTIN\administrators 4.0K Apr 15 22:34 Policies
8.0K drwxrwx---+  2 root BUILTIN\administrators 4.0K Nov  4  2022 scripts

./mad.mater.int/Policies:
total 216K
8.0K drwxrwx---+ 26 root                   BUILTIN\administrators 4.0K Apr 15 22:34 .
8.0K drwxrwx---+  4 root                   BUILTIN\administrators 4.0K Nov  7  2022 ..
8.0K drwxrwx---+  4 MAD\domain admins      MAD\domain admins      4.0K Apr 15 22:34 {0491EEAA-BF8A-43BE-98CA-72128C7EC0EA}
8.0K drwxrwx---+  4 root                   MAD\domain admins      4.0K Nov  4  2022 {06D5E045-DF21-45AA-962A-41CB3F665FCC}
8.0K drwxrwx---+  4 root                   MAD\domain admins      4.0K Nov  4  2022 {0723DCE9-C915-492A-9423-104BE034BCEF}
8.0K drwxrwx---+  5 root                   MAD\domain admins      4.0K Nov  4  2022 {0769489D-FC31-4244-AB87-4EE2C4E20CCC}
8.0K drwxrwx---+  4 root                   MAD\domain admins      4.0K Nov  4  2022 {0A529EA3-06B6-4FE1-BC51-AB793E6A4523}
8.0K drwxrwx---+  5 root                   MAD\domain admins      4.0K Nov  4  2022 {1111C19B-0CB9-4BA9-BFF1-3648F3862F93}
8.0K drwxrwx---+  4 root                   MAD\domain admins      4.0K Nov  4  2022 {31B2F340-016D-11D2-945F-00C04FB984F9}
8.0K drwxrwx---+  5 root                   MAD\domain admins      4.0K Nov  4  2022 {3548966F-440A-43D9-B05E-E681AD3B58F9}
8.0K drwxrwx---+  4 root                   MAD\domain admins      4.0K Nov  4  2022 {3B09CD87-EF3C-4959-A8E8-C82B95FB5148}
8.0K drwxrwx---+  4 root                   MAD\domain admins      4.0K Nov  4  2022 {69F60D78-F2EF-41F5-863A-4B7698D939BA}
8.0K drwxrwx---+  4 root                   MAD\domain admins      4.0K Nov  4  2022 {6AC1786C-016F-11D2-945F-00C04FB984F9}
8.0K drwxrwx---+  4 root                   MAD\domain admins      4.0K Nov  4  2022 {78ADF699-01E8-4F99-84B4-7EB4430E7105}
8.0K drwxrwx---+  4 root                   MAD\domain admins      4.0K Nov  4  2022 {790FBA77-CE1A-4B93-B66B-2A97880DE31D}
8.0K drwxrwx---+  4 MAD\luis               MAD\domain admins      4.0K Nov  4  2022 {90D103E0-3AA7-4A18-8E51-501F73658A1C}
8.0K drwxrwx---+  4 MAD\luis               MAD\domain admins      4.0K Nov  7  2022 {B0AC4C94-9949-4FC2-8F54-CAADFDAD95D4}
8.0K drwxrwx---+  5 root                   MAD\domain admins      4.0K Nov  4  2022 {B2250B1E-DDCC-4267-9816-D115CCF24735}
8.0K drwxrwx---+  4 root                   MAD\domain admins      4.0K Nov  4  2022 {B7D7E89E-002B-4FCB-80F8-534C2976483C}
8.0K drwxrwx---+  4 MAD\domain admins      MAD\domain admins      4.0K Apr 15 22:10 {BE3B49C3-C557-4B1B-8B12-A1023D12D9D7}
8.0K drwxrwx---+  5 root                   MAD\domain admins      4.0K Nov  4  2022 {CA510ED6-934C-47FC-B81D-6942A39D3DE6}
8.0K drwxrwx---+  4 root                   MAD\domain admins      4.0K Nov  4  2022 {D2B5681B-E6B8-4B00-AF76-D81477BD19A6}
8.0K drwxrwx---+  4 MAD\luis               MAD\domain admins      4.0K Nov  4  2022 {E285AB09-81A3-4AC8-9195-434B56F22D60}
8.0K drwxrwx---+  4 MAD\domain admins      MAD\domain admins      4.0K Nov 28 11:20 {EB06228D-84E1-456F-8F88-06A36EA3EB4D}
8.0K drwxrwx---+  4 MAD\domain admins      MAD\domain admins      4.0K Feb  1 17:13 {EC8AFE87-C57A-4AE7-A9FC-8A82CB8745DA}
 16K drwxrwx---+ 24 BUILTIN\administrators MAD\domain users        12K Nov  7  2022 PolicyDefinitions

On 24 May 2023 at 17:07 +0200, samba at lists.samba.org, wrote:
>
> so to put it another way, you appear to have 'root:Domain Admins' as the
> owner of
> /var/lib/samba/sysvol/mad.mater.int/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}
> and it should be 'Domain Admins:Domain Admins'