Re: [Samba] SYSVOL ACLs and GPOs

2012-11-21 Thread Olivier BILHAUT
Hi Andrew, Hi Alex, Hi all. We're really pleased to announce that in this release (S4 rc5), the sysvolreset command works fine and returns no errors. The clients download their GPO fine, and the sysvolcheck return no error as well ! So our problems with SYSVOL ACL are closed for the

Re: [Samba] SYSVOL ACLs and GPOs

2012-11-10 Thread Andrew Bartlett
On Thu, 2012-11-01 at 14:54 +, Alex Matthews wrote: On 30/10/2012 00:08, Jeremy Allison wrote: On Tue, Oct 30, 2012 at 11:00:31AM +1100, Andrew Bartlett wrote: be a particular trigger - but it shouldn't be able to make a modification that doesn't go via vfs_acl_xattr. For Alex,

Re: [Samba] SYSVOL ACLs and GPOs

2012-11-01 Thread Alex Matthews
On 30/10/2012 00:08, Jeremy Allison wrote: On Tue, Oct 30, 2012 at 11:00:31AM +1100, Andrew Bartlett wrote: be a particular trigger - but it shouldn't be able to make a modification that doesn't go via vfs_acl_xattr. For Alex, before running the Group Policy tools on WinXP, he gets (at level

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-29 Thread Olivier BILHAUT
Hi Andrew, I Updated our S4 instance this morning with the updated git (master). We still have a problem with one of our 3 GPO. But if I remove one of them, the same error is displayed with any of the remaining GPO. I need to remove them all to completely get rid of this message. I also

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-27 Thread Alex Matthews
On 24/10/2012 17:25, Alex Matthews wrote: On 24/10/2012 12:09, Andrew Bartlett wrote: On Wed, 2012-10-24 at 10:49 +0100, Alex Matthews wrote: Hi, I have installed a virtual testing network consisting of one samba4 PDC (latest git master) and one Windows XP Pro SP3 (fully updated)machine. I

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-26 Thread Olivier BILHAUT
Hi Andrew, Hi Alex, Pleased to see that you figured this out. We've got exactly the same problem from a blank provisioned domain (not a migration), with a setup with 2 gpo. (Ubuntu 12.04 - S4 rc3). Since our instance is in a semi-production environment, we'll wait for your fix. But if needed,

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-26 Thread Alex Matthews
On 26/10/2012 02:37, Andrew Bartlett wrote: On Fri, 2012-10-26 at 00:34 +0100, Alex Matthews wrote: On 25/10/2012 23:27, Andrew Bartlett wrote: On Thu, 2012-10-25 at 21:48 +1100, Andrew Bartlett wrote: On Thu, 2012-10-25 at 11:41 +0100, Alex Matthews wrote: On 25/10/2012 11:30, Andrew

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-26 Thread Andrew Bartlett
On Fri, 2012-10-26 at 00:49 +0100, Alex Matthews wrote: On 26/10/2012 00:34, Alex Matthews wrote: On 25/10/2012 23:27, Andrew Bartlett wrote: On Thu, 2012-10-25 at 21:48 +1100, Andrew Bartlett wrote: On Thu, 2012-10-25 at 11:41 +0100, Alex Matthews wrote: On 25/10/2012 11:30, Andrew

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-26 Thread Andrew Bartlett
On Fri, 2012-10-26 at 09:36 +0200, Olivier BILHAUT wrote: Hi Andrew, Hi Alex, Pleased to see that you figured this out. We've got exactly the same problem from a blank provisioned domain (not a migration), with a setup with 2 gpo. (Ubuntu 12.04 - S4 rc3). Since our instance is in a

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-26 Thread Andrew Bartlett
On Fri, 2012-10-26 at 10:44 +0100, Alex Matthews wrote: I'm assuming because of the way I laid my directory tree out I could also just provision as normal and run the tests? Just makes it difficult to un-provision. I did a bit of testing last night and sysvolcheck returns no errors

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-26 Thread Alex Matthews
On 26/10/2012 11:03, Andrew Bartlett wrote: On Fri, 2012-10-26 at 10:44 +0100, Alex Matthews wrote: I'm assuming because of the way I laid my directory tree out I could also just provision as normal and run the tests? Just makes it difficult to un-provision. I did a bit of testing last night

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-25 Thread Alex Matthews
On 25/10/2012 02:31, Andrew Bartlett wrote: On Wed, 2012-10-24 at 18:36 +0100, Alex Matthews wrote: On 24/10/2012 17:25, Alex Matthews wrote: On 24/10/2012 12:09, Andrew Bartlett wrote: On Wed, 2012-10-24 at 10:49 +0100, Alex Matthews wrote: Hi, I have installed a virtual testing network

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-25 Thread Andrew Bartlett
On Thu, 2012-10-25 at 10:01 +0100, Alex Matthews wrote: On 25/10/2012 02:31, Andrew Bartlett wrote: On Wed, 2012-10-24 at 18:36 +0100, Alex Matthews wrote: On 24/10/2012 17:25, Alex Matthews wrote: On 24/10/2012 12:09, Andrew Bartlett wrote: On Wed, 2012-10-24 at 10:49 +0100, Alex

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-25 Thread Alex Matthews
On 25/10/2012 10:20, Andrew Bartlett wrote: On Thu, 2012-10-25 at 10:01 +0100, Alex Matthews wrote: On 25/10/2012 02:31, Andrew Bartlett wrote: On Wed, 2012-10-24 at 18:36 +0100, Alex Matthews wrote: On 24/10/2012 17:25, Alex Matthews wrote: On 24/10/2012 12:09, Andrew Bartlett wrote: On

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-25 Thread Andrew Bartlett
On Thu, 2012-10-25 at 10:32 +0100, Alex Matthews wrote: samba-tool ntacl sysvolcheck shows: sudo /usr/local/samba/bin/samba-tool ntacl sysvolcheck ERROR(class 'samba.provision.ProvisioningError'): uncaught exception - ProvisioningError: VFS ACL on GPO directory

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-25 Thread Alex Matthews
On 25/10/2012 11:30, Andrew Bartlett wrote: On Thu, 2012-10-25 at 10:32 +0100, Alex Matthews wrote: samba-tool ntacl sysvolcheck shows: sudo /usr/local/samba/bin/samba-tool ntacl sysvolcheck ERROR(class 'samba.provision.ProvisioningError'): uncaught exception - ProvisioningError: VFS ACL on

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-25 Thread Andrew Bartlett
On Thu, 2012-10-25 at 11:41 +0100, Alex Matthews wrote: On 25/10/2012 11:30, Andrew Bartlett wrote: On Thu, 2012-10-25 at 10:32 +0100, Alex Matthews wrote: samba-tool ntacl sysvolcheck shows: sudo /usr/local/samba/bin/samba-tool ntacl sysvolcheck ERROR(class

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-25 Thread Andrew Bartlett
On Thu, 2012-10-25 at 21:48 +1100, Andrew Bartlett wrote: On Thu, 2012-10-25 at 11:41 +0100, Alex Matthews wrote: On 25/10/2012 11:30, Andrew Bartlett wrote: On Thu, 2012-10-25 at 10:32 +0100, Alex Matthews wrote: samba-tool ntacl sysvolcheck shows: sudo

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-25 Thread Alex Matthews
On 25/10/2012 23:27, Andrew Bartlett wrote: On Thu, 2012-10-25 at 21:48 +1100, Andrew Bartlett wrote: On Thu, 2012-10-25 at 11:41 +0100, Alex Matthews wrote: On 25/10/2012 11:30, Andrew Bartlett wrote: On Thu, 2012-10-25 at 10:32 +0100, Alex Matthews wrote: samba-tool ntacl sysvolcheck

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-25 Thread Alex Matthews
On 25/10/2012 23:27, Andrew Bartlett wrote: On Thu, 2012-10-25 at 21:48 +1100, Andrew Bartlett wrote: On Thu, 2012-10-25 at 11:41 +0100, Alex Matthews wrote: On 25/10/2012 11:30, Andrew Bartlett wrote: On Thu, 2012-10-25 at 10:32 +0100, Alex Matthews wrote: samba-tool ntacl sysvolcheck

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-25 Thread Alex Matthews
On 26/10/2012 00:34, Alex Matthews wrote: On 25/10/2012 23:27, Andrew Bartlett wrote: On Thu, 2012-10-25 at 21:48 +1100, Andrew Bartlett wrote: On Thu, 2012-10-25 at 11:41 +0100, Alex Matthews wrote: On 25/10/2012 11:30, Andrew Bartlett wrote: On Thu, 2012-10-25 at 10:32 +0100, Alex Matthews

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-25 Thread Andrew Bartlett
On Fri, 2012-10-26 at 00:34 +0100, Alex Matthews wrote: On 25/10/2012 23:27, Andrew Bartlett wrote: On Thu, 2012-10-25 at 21:48 +1100, Andrew Bartlett wrote: On Thu, 2012-10-25 at 11:41 +0100, Alex Matthews wrote: On 25/10/2012 11:30, Andrew Bartlett wrote: On Thu, 2012-10-25 at 10:32

[Samba] SYSVOL ACLs and GPOs

2012-10-24 Thread Alex Matthews
Hi, I have installed a virtual testing network consisting of one samba4 PDC (latest git master) and one Windows XP Pro SP3 (fully updated)machine. I have successfully provisioned an AD Domain and joined the XP machine to it. When I run the gpmc on the XP Pro machine and select: Forest:

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-24 Thread Andrew Bartlett
On Wed, 2012-10-24 at 10:49 +0100, Alex Matthews wrote: Hi, I have installed a virtual testing network consisting of one samba4 PDC (latest git master) and one Windows XP Pro SP3 (fully updated)machine. I have successfully provisioned an AD Domain and joined the XP machine to it. When

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-24 Thread Alex Matthews
On 24/10/2012 12:09, Andrew Bartlett wrote: On Wed, 2012-10-24 at 10:49 +0100, Alex Matthews wrote: Hi, I have installed a virtual testing network consisting of one samba4 PDC (latest git master) and one Windows XP Pro SP3 (fully updated)machine. I have successfully provisioned an AD Domain

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-24 Thread Alex Matthews
On 24/10/2012 17:25, Alex Matthews wrote: On 24/10/2012 12:09, Andrew Bartlett wrote: On Wed, 2012-10-24 at 10:49 +0100, Alex Matthews wrote: Hi, I have installed a virtual testing network consisting of one samba4 PDC (latest git master) and one Windows XP Pro SP3 (fully updated)machine. I

Re: [Samba] SYSVOL ACLs and GPOs

2012-10-24 Thread Andrew Bartlett
On Wed, 2012-10-24 at 18:36 +0100, Alex Matthews wrote: On 24/10/2012 17:25, Alex Matthews wrote: On 24/10/2012 12:09, Andrew Bartlett wrote: On Wed, 2012-10-24 at 10:49 +0100, Alex Matthews wrote: Hi, I have installed a virtual testing network consisting of one samba4 PDC (latest git