[Samba] Provisioning Samba-AD

[Rowland Penny]

On Thu, 30 Nov 2023 09:56:54 +0000 (UTC)
Anantha Raghava H A via samba <samba at lists.samba.org> wrote:

> Hi, 
> I have downloaded the version 4.19.3 and built the Samba packages
> from source. While trying to provision the Domain using command -
> "samba-tool domain provision --server-role=dc --use-rfc2307
> --dns-backend=SAMBA_INTERNAL --realm=<REALM> -domain=<DOMAIN>
> --adminpass=<PASSWORD>" at the final stages post self join, I am
> seeing the error as shown below. Can someone guide to resolve this
> issue? 
> 
> Error log: 
> 
> 8.620 INFO 2023-11-30 09:42:43,712 pid:7
> /usr/local/samba/lib/python3.10/site-packages/samba/provision/__init__.py
> #1595: Setting up self join 9.346 Repacking database from v1 to v2
> format (first record
> CN=Localization-Display-Id,CN=Schema,CN=Configuration,DC=ad,DC=wtitc,DC=org)
> 9.392 Repack: re-packed 10000 records so far 9.441 Repacking database
> from v1 to v2 format (first record
> CN=mSMQConfiguration-Display,CN=40E,CN=DisplaySpecifiers,CN=Configuration,DC=ad,DC=wtitc,DC=org)
> 9.492 Repacking database from v1 to v2 format (first record
> CN=6bcd567a-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=ad,DC=wtitc,DC=org)
> 9.790 set_nt_acl_conn: fset_nt_acl returned NT_STATUS_ACCESS_DENIED.
> 9.790 ERROR(runtime): uncaught exception - (3221225506, '{Access
> Denied} A process has requested access to an object but has not been
> granted those access rights.') 9.792 File
> "/usr/local/samba/lib/python3.10/site-packages/samba/netcmd/__init__.py",
> line 279, in _run 9.792 return self.run(*args, **kwargs) 9.792 File
> "/usr/local/samba/lib/python3.10/site-packages/samba/netcmd/domain/provision.py",
> line 343, in run 9.792 result = provision(self.logger, 9.792 File
> "/usr/local/samba/lib/python3.10/site-packages/samba/provision/__init__.py",
> line 2369, in provision 9.792 provision_fill(samdb, secrets_ldb,
> logger, names, paths, 9.792 File
> "/usr/local/samba/lib/python3.10/site-packages/samba/provision/__init__.py",
> line 1985, in provision_fill 9.792 setsysvolacl(samdb,
> paths.netlogon, paths.sysvol, paths.root_uid, 9.792 File
> "/usr/local/samba/lib/python3.10/site-packages/samba/provision/__init__.py",
> line 1762, in setsysvolacl 9.792 _setntacl(sysvol) 9.792 File
> "/usr/local/samba/lib/python3.10/site-packages/samba/provision/__init__.py",
> line 1756, in _setntacl 9.792 return setntacl( 9.792 File
> "/usr/local/samba/lib/python3.10/site-packages/samba/ntacls.py", line
> 229, in setntacl 9.792 smbd.set_nt_acl( 
> 
>

Yes, but what OS have you built Samba on and what is the filesystem ?

Rowland