[Samba] Samba-tool gpo manage - The authenticated user does not have sufficient privileges

[Jarosław Kłopotek - INTERDUO]

W dniu 18.04.2024 o 09:56, Rowland Penny via samba pisze:
> On Thu, 18 Apr 2024 09:03:10 +0200
> Jarosław Kłopotek - INTERDUO via samba<samba at lists.samba.org>  wrote:
>
>> Hi all,
>>
>> I run cmd:
>> samba-tool gpo manage scripts startup add \
>> {31B2F340-016D-11D2-945F-00C04FB984F9} \
>> /var/lib/samba/sysvol/fartest.local/scripts/startup.bat
> Are you running the command as root or with sudo ?
as root
>> with result:
>> [cut]
>> ERROR: The authenticated user does not have sufficient privileges
>>     File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line
>> 3230, in run
>>       create_directory_hier(conn, vgp_dir)
>>     File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line
>> 383, in create_directory_hier
>>       conn.mkdir(path)
>> signed SMB2 message (sign_algo_id=2)
>>
>> I tried also this cmd with -UAdministrator but the same error appears.
>>
>> Is this normal?
>> If yes where to configure this permissions?
> What version of Samba are you using, there have been a few updates in
> the area that is failing for you.
ii  samba                    2:4.17.12+dfsg-0+deb12u1 amd64 SMB/CIFS 
file, print, and login server for Unix
ii  samba-ad-provision       2:4.17.12+dfsg-0+deb12u1 all Samba files 
needed for AD domain provision
un  samba-client             <none> <none>       (no description available)
ii  samba-common             2:4.17.12+dfsg-0+deb12u1 all common files 
used by both the Samba server and cli>
ii  samba-common-bin         2:4.17.12+dfsg-0+deb12u1 amd64 Samba common 
files used by both the server and the>
ii samba-dsdb-modules:amd64 2:4.17.12+dfsg-0+deb12u1 amd64 Samba 
Directory Services Database
ii samba-libs:amd64         2:4.17.12+dfsg-0+deb12u1 amd64 Samba core 
libraries
un  samba-testsuite          <none> <none>       (no description available)
ii samba-vfs-modules:amd64  2:4.17.12+dfsg-0+deb12u1 amd64 Samba Virtual 
FileSystem pluginsIn other words use newest available in Debian 12 
stable repo.

-- 
Jarosław Kłopotek, kom. 607 893 111