[Samba] Samba-tool gpo manage - The authenticated user does not have sufficient privileges

[David Mulder]

On 4/18/24 1:03 AM, Jarosław Kłopotek - INTERDUO via samba wrote:
> Hi all,
>
> I run cmd:
> samba-tool gpo manage scripts startup add \
> {31B2F340-016D-11D2-945F-00C04FB984F9} \
> /var/lib/samba/sysvol/fartest.local/scripts/startup.bat
>
> with result:
> [cut]
> ERROR: The authenticated user does not have sufficient privileges
>   File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line 
> 3230, in run
>     create_directory_hier(conn, vgp_dir)
>   File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line 383, 
> in create_directory_hier
>     conn.mkdir(path)
> signed SMB2 message (sign_algo_id=2)

You've authenticated an SMB session, and your user is attempting to 
create a directory on the share, but is getting a permissions error. If 
this is happening for the Administrator, then you clearly have a 
permissions issue on your sysvol share. Try running `samba-tool ntacl 
sysvolreset`.

-- 
David Mulder
Labs Software Engineer, Samba
SUSE
1221 S Valley Grove Way, Suite 500
Pleasant Grove, UT 84062
(P)+1 385.208.2989
dmulder at suse.com
http://www.suse.com