[Samba] Missing Policies folder in AD and /var/lib/samba/sysvol
Rick Hollinbeck
admin at westernwares.com
Wed Mar 26 21:26:46 UTC 2025
Progress maybe...
I tried running sysvolcheck with strace and noticed something really odd....
This was in the trace:
getxattr("/var/lib/samba/sysvol/samdom.example.com/Policies/{6AC1786C-016F-11D2-945F-00C04fB984F9}",
"security.NTACL", NULL, 0) = -1 ENOENT
But I knew that folder was in my sysvol folder:
├── [drwxrwx--- root BUILTIN\administrators]
{31B2F340-016D-11D2-945F-00C04FB984F9}
│ ├── [-rwxrwx--- root BUILTIN\administrators] GPT.INI
│ ├── [drwxrwx--- root BUILTIN\administrators] MACHINE
│ └── [drwxrwx--- root BUILTIN\administrators] USER
└── [drwxrwx--- root BUILTIN\administrators]
{6AC1786C-016F-11D2-945F-00C04FB984F9}
├── [-rwxrwx--- root BUILTIN\administrators] GPT.INI
├── [drwxrwx--- root BUILTIN\administrators] MACHINE
└── [drwxrwx--- root BUILTIN\administrators] USER
But this command also failed when I cut and pasted the folder name from
the strace:
pi at pidc3:~ $ sudo ls -al
/var/lib/samba/sysvol/samdom.example.com/Policies/{6AC1786C-016F-11D2-945F-00C04fB984F9}
ls: cannot access
'/var/lib/samba/sysvol/samdom.example.com/Policies/{6AC1786C-016F-11D2-945F-00C04fB984F9}':
No such file or directory
It took me awhile to spot the problem...
Somehow sysvolcheck is using a LOWER CASE 'f' in the GUID folder name
for the default GPO!
Where is this coming from? Of course, in Windows this doesn't matter.
But in linux it is a showstopper.
How can I convince sysvolcheck and sysvolreset to use the correct
subfolder name - all uppercase?
More information about the samba
mailing list