[Samba] SYSVOL ACLs and GPOs
Jeremy Allison
jra at samba.org
Mon Oct 29 18:08:53 MDT 2012
On Tue, Oct 30, 2012 at 11:00:31AM +1100, Andrew Bartlett wrote:
> > > be a particular trigger - but it shouldn't be able to make a
> > > modification that doesn't go via vfs_acl_xattr.
> > >
> > > For Alex, before running the Group Policy tools on WinXP, he gets (at
> > > level 10 on samba-tool ntacl sysvolcheck):
> > >
> > > get_nt_acl_internal: blob hash matches for
> > > file /root/samba_test/build_master/var/locks/sysvol/realm.com/Policies/{6AC1786C-016F-11D2-945F-00C04FB984F9}
> > >
> > > then after, he gets:
> > >
> > > get_nt_acl_internal: blob hash does not match for
> > > file /root/samba_test/build_master/var/locks/sysvol/realm.com/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9} - returning file system SD mapping.
> >
> > Is this message from smbd, or from samba-tool ?
>
> That's what vfs_acl_common is printing, being run from samba-tool ntacl
> sysvolcheck. It links to the VFS layer.
So this looks like it's running the Group Policy tools on WinXP
that causes the problem ?
Can we get a debug level 10 log of that activity going on
against smbd ?
Jeremy.
More information about the samba-technical
mailing list