[Samba] Samba-tool gpo manage - The authenticated user does not have sufficient privileges

[Jarosław Kłopotek - INTERDUO]

W dniu 18.04.2024 o 12:01, Jarosław Kłopotek - INTERDUO via samba pisze:
>
> W dniu 18.04.2024 o 09:56, Rowland Penny via samba pisze:
>> On Thu, 18 Apr 2024 09:03:10 +0200
>> Jarosław Kłopotek - INTERDUO via samba<samba at lists.samba.org>  wrote:
>>
>>> Hi all,
>>>
>>> I run cmd:
>>> samba-tool gpo manage scripts startup add \
>>> {31B2F340-016D-11D2-945F-00C04FB984F9} \
>>> /var/lib/samba/sysvol/fartest.local/scripts/startup.bat
>> Are you running the command as root or with sudo ?
> as root
>>> with result:
>>> [cut]
>>> ERROR: The authenticated user does not have sufficient privileges
>>>     File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line
>>> 3230, in run
>>>       create_directory_hier(conn, vgp_dir)
>>>     File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line
>>> 383, in create_directory_hier
>>>       conn.mkdir(path)
>>> signed SMB2 message (sign_algo_id=2)
>>>
>>> I tried also this cmd with -UAdministrator but the same error appears.
>>>
>>> Is this normal?
>>> If yes where to configure this permissions?
>> What version of Samba are you using, there have been a few updates in
>> the area that is failing for you.
> ii  samba                    2:4.17.12+dfsg-0+deb12u1 amd64 SMB/CIFS 
> file, print, and login server for Unix
> ii  samba-ad-provision       2:4.17.12+dfsg-0+deb12u1 all Samba files 
> needed for AD domain provision
> un  samba-client             <none> <none>       (no description 
> available)
> ii  samba-common             2:4.17.12+dfsg-0+deb12u1 all common files 
> used by both the Samba server and cli>
> ii  samba-common-bin         2:4.17.12+dfsg-0+deb12u1 amd64 Samba 
> common files used by both the server and the>
> ii samba-dsdb-modules:amd64 2:4.17.12+dfsg-0+deb12u1 amd64 Samba 
> Directory Services Database
> ii samba-libs:amd64         2:4.17.12+dfsg-0+deb12u1 amd64 Samba core 
> libraries
> un  samba-testsuite          <none> <none>       (no description 
> available)
> ii samba-vfs-modules:amd64  2:4.17.12+dfsg-0+deb12u1 amd64 Samba 
> Virtual FileSystem pluginsIn other words use newest available in 
> Debian 12 stable repo.

Additionally I tested samba from unstable repository

Other lines errored:
ERROR: The authenticated user does not have sufficient privileges
   File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line 3571, 
in run
     create_directory_hier(conn, vgp_dir)
   File "/usr/lib/python3/dist-packages/samba/netcmd/gpcommon.py", line 
39, in create_directory_hier
     conn.mkdir(path)

dpkg -l samba*
ii  samba                    2:4.19.6+dfsg-1 amd64        SMB/CIFS file, 
print,>
ii  samba-ad-provision       2:4.19.6+dfsg-1 all          Samba files 
needed fo>
un  samba-client             <none> <none>       (no description avail>
ii  samba-common             2:4.19.6+dfsg-1 all          common files 
used by >
ii  samba-common-bin         2:4.19.6+dfsg-1 amd64        Samba common 
files us>
ii  samba-dsdb-modules:amd64 2:4.19.6+dfsg-1 amd64        Samba 
Directory Servi>
ii  samba-libs:amd64         2:4.19.6+dfsg-1 amd64        Samba core 
libraries
un  samba-testsuite          <none> <none>       (no description avail>
ii  samba-vfs-modules:amd64  2:4.19.6+dfsg-1 amd64        Samba Virtual 
FileS

-- 
Jarosław Kłopotek, kom. 607 893 111