Re: [Samba] GPOs don't work after update from Samba4.0 alpha 17 to 4.0.1

2013-02-17 Thread Julian Timm 
I have checked the ACL of the Sysvol share:

1. After the upgrade from alpha 17 to 4.0.1 the ACL looks like this:
# file: var/lib/samba/var/locks/sysvol/
# owner: root
# group: adm
user::rwx
group::r-x
other::r-x

2. After a 'samba-tool ntacl sysvolreset' the ACL looks like this:
# owner: root
# group: adm
user::rwx
user:root:rwx
group::rwx
group:adm:rwx
group:306:r-x
group:3000147:r-x
group:3000148:rwx
mask::rwx
other::---
default:user::rwx
default:user:root:rwx
default:group::---
default:group:adm:rwx
default:group:306:r-x
default:group:3000147:r-x
default:group:3000148:rwx
default:mask::rwx
default:other::---

Are the ACLs correct and if yes, why GPOs don't work even when i remove the 
WMI-Filter?

Thanks for help.

Gesendet: Sonntag, 27. Januar 2013 um 15:57 Uhr
Von: x-dimens...@gmx.net
An: dbgtmas...@gmx.at, samba@lists.samba.org
Betreff: Re: [Samba] GPOs don't work after update from Samba4.0 alpha 17 to 
4.0.1
Yes, i have used wmi filters before to set some GPOs for our Windows XP clients 
and some for Windows 7 clients only.

I have removed the wmi filters from Microsofts Group Policy tool, but it seems 
to have no effect, i still get the same errors.


 Original-Nachricht 
 Datum: Sun, 27 Jan 2013 15:37:41 +0100
 Von: Thomas Manninger dbgtmas...@gmx.at
 An: samba@lists.samba.org
 Betreff: Re: [Samba] GPOs don\'t work after update from Samba4.0 alpha 17 to 
 4.0.1

 Do you used wmi filters for your gpos?

  Original-Nachricht 
  Datum: Sun, 27 Jan 2013 13:25:22 +0100
  Von: x-dimens...@gmx.net
  An: samba@lists.samba.org
  Betreff: [Samba] GPOs don\'t work after update from Samba4.0 alpha 17 to
 4.0.1

  Hi!
 
  I have updated our server from Samba 4 alpha 17 to Samba 4.0.1.
  Everything seems to work fine after some reconfiguration, but our
  GPOs are not working anymore.
 
  Samba 4 alpha 17 was using ntvfs and the root partition with the sysvol
  share was mounted with user_xattr only in /etc/fstab.
  Samba 4.0.1 is now set to use s3fs and the root partition is mouted with
  user_xattr,acl,barrier=1.
 
  After updating to the newer Samba release i run samba-tool ntacl
  sysvolreset like it was described in the release notes.
 
  Gpresult /H shows me that only the Default Domain Policy is loaded, but
  not all the policies in the OU.
 
  Gpupdate /force shows this error on a client:
 
  ---
  Die Richtlinie wird aktualisiert...
 
  Die Aktualisierung der Benutzerrichtlinie wurde erfolgreich
 abgeschlossen.
  Die Computerrichtlinie konnte nicht erfolgreich aktualisiert werden.
  Folgende Probleme sind aufgetreten:
 
  Fehler bei der Verarbeitung der Gruppenrichtlinie. Der WMI-Filter
 (Windows
  Management Instrumentation) für das Gruppenrichtlinienobjekt
 
 cn={97E400EB-EDFD-4024-A9D5-1BB8261ABE01},cn=policies,cn=system,DC=mynetwork,DC=lan
  konnte nicht ausgewertet werden. Dies kann darauf zurückzuführen sein,
  dass RSoP deaktiviert ist, oder dass der WMI-Dienst deaktiviert oder
  angehalten wurde, bzw. andere WMI-Fehler aufgetreten sind. Stellen Sie
 sicher, dass
  der WMI-Dienst gestartet ist und dass der Starttyp auf automatischen
 Start
  festgelegt ist. Neue Gruppenrichtlinienobjekte oder -einstellungen
 werden
  nicht verarbeitet, bis dieses Ereignis behoben wurde.
  ---
  Google Translate:
 
  The policy is updated ...
 
  Updating the user policy has been successfully completed.The computer
  policy could not be updated successfully. The following problems:
 
  Error processing of Group Policy. The WMI filter (Windows Management
  Instrumentation) for the GPO cn =
 {97E400EB-4024-A9D5-EDFD-1BB8261ABE01}, cn =
  policies, cn = System, DC = mynetwork, DC = lan could not be evaluated.
  This may be due to the fact that RSOP is disabled, or that the WMI
 service is
  disabled or stopped, or other WMI errors. Make sure that the WMI service
  is started and that the startup type is set to start automatically. New
  Group Policy objects or settings will not be processed until this event
 is
  resolved.
  ---
 
  How can i get my GPOs to work again?
 
  Thanks for help!
  --
  To unsubscribe from this list go to the following URL and read the
  instructions: https://lists.samba.org/mailman/options/samba
 --
 To unsubscribe from this list go to the following URL and read the
 instructions: 
 https://lists.samba.org/mailman/options/samba[https://lists.samba.org/mailman/options/samba]
--
To unsubscribe from this list go to the following URL and read the
instructions: 
https://lists.samba.org/mailman/options/samba[https://lists.samba.org/mailman/options/samba]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] GPOs don't work after update from Samba4.0 alpha 17 to 4.0.1

2013-01-27 Thread X-Dimension 
Hi!

I have updated our server from Samba 4 alpha 17 to Samba 4.0.1.
Everything seems to work fine after some reconfiguration, but our
GPOs are not working anymore.

Samba 4 alpha 17 was using ntvfs and the root partition with the sysvol share 
was mounted with user_xattr only in /etc/fstab.
Samba 4.0.1 is now set to use s3fs and the root partition is mouted with 
user_xattr,acl,barrier=1.

After updating to the newer Samba release i run samba-tool ntacl sysvolreset 
like it was described in the release notes.

Gpresult /H shows me that only the Default Domain Policy is loaded, but not all 
the policies in the OU.

Gpupdate /force shows this error on a client:

---
Die Richtlinie wird aktualisiert...

Die Aktualisierung der Benutzerrichtlinie wurde erfolgreich abgeschlossen.
Die Computerrichtlinie konnte nicht erfolgreich aktualisiert werden. Folgende 
Probleme sind aufgetreten:

Fehler bei der Verarbeitung der Gruppenrichtlinie. Der WMI-Filter (Windows 
Management Instrumentation) für das Gruppenrichtlinienobjekt 
cn={97E400EB-EDFD-4024-A9D5-1BB8261ABE01},cn=policies,cn=system,DC=mynetwork,DC=lan
 konnte nicht ausgewertet werden. Dies kann darauf zurückzuführen sein, dass 
RSoP deaktiviert ist, oder dass der WMI-Dienst deaktiviert oder angehalten 
wurde, bzw. andere WMI-Fehler aufgetreten sind. Stellen Sie sicher, dass der 
WMI-Dienst gestartet ist und dass der Starttyp auf automatischen Start 
festgelegt ist. Neue Gruppenrichtlinienobjekte oder -einstellungen werden nicht 
verarbeitet, bis dieses Ereignis behoben wurde.
---
Google Translate:

The policy is updated ...

Updating the user policy has been successfully completed.The computer policy 
could not be updated successfully. The following problems:

Error processing of Group Policy. The WMI filter (Windows Management 
Instrumentation) for the GPO cn = {97E400EB-4024-A9D5-EDFD-1BB8261ABE01}, cn = 
policies, cn = System, DC = mynetwork, DC = lan could not be evaluated. This 
may be due to the fact that RSOP is disabled, or that the WMI service is 
disabled or stopped, or other WMI errors. Make sure that the WMI service is 
started and that the startup type is set to start automatically. New Group 
Policy objects or settings will not be processed until this event is resolved.
---

How can i get my GPOs to work again?

Thanks for help!
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] GPOs don't work after update from Samba4.0 alpha 17 to 4.0.1

2013-01-27 Thread Thomas Manninger 
Do you used wmi filters for your gpos?

 Original-Nachricht 
 Datum: Sun, 27 Jan 2013 13:25:22 +0100
 Von: x-dimens...@gmx.net
 An: samba@lists.samba.org
 Betreff: [Samba] GPOs don\'t work after update from Samba4.0 alpha 17 to 4.0.1

 Hi!
 
 I have updated our server from Samba 4 alpha 17 to Samba 4.0.1.
 Everything seems to work fine after some reconfiguration, but our
 GPOs are not working anymore.
 
 Samba 4 alpha 17 was using ntvfs and the root partition with the sysvol
 share was mounted with user_xattr only in /etc/fstab.
 Samba 4.0.1 is now set to use s3fs and the root partition is mouted with 
 user_xattr,acl,barrier=1.
 
 After updating to the newer Samba release i run samba-tool ntacl
 sysvolreset like it was described in the release notes.
 
 Gpresult /H shows me that only the Default Domain Policy is loaded, but
 not all the policies in the OU.
 
 Gpupdate /force shows this error on a client:
 
 ---
 Die Richtlinie wird aktualisiert...
 
 Die Aktualisierung der Benutzerrichtlinie wurde erfolgreich abgeschlossen.
 Die Computerrichtlinie konnte nicht erfolgreich aktualisiert werden.
 Folgende Probleme sind aufgetreten:
 
 Fehler bei der Verarbeitung der Gruppenrichtlinie. Der WMI-Filter (Windows
 Management Instrumentation) für das Gruppenrichtlinienobjekt
 cn={97E400EB-EDFD-4024-A9D5-1BB8261ABE01},cn=policies,cn=system,DC=mynetwork,DC=lan
 konnte nicht ausgewertet werden. Dies kann darauf zurückzuführen sein,
 dass RSoP deaktiviert ist, oder dass der WMI-Dienst deaktiviert oder
 angehalten wurde, bzw. andere WMI-Fehler aufgetreten sind. Stellen Sie 
 sicher, dass
 der WMI-Dienst gestartet ist und dass der Starttyp auf automatischen Start
 festgelegt ist. Neue Gruppenrichtlinienobjekte oder -einstellungen werden
 nicht verarbeitet, bis dieses Ereignis behoben wurde.
 ---
 Google Translate:
 
 The policy is updated ...
 
 Updating the user policy has been successfully completed.The computer
 policy could not be updated successfully. The following problems:
 
 Error processing of Group Policy. The WMI filter (Windows Management
 Instrumentation) for the GPO cn = {97E400EB-4024-A9D5-EDFD-1BB8261ABE01}, cn 
 =
 policies, cn = System, DC = mynetwork, DC = lan could not be evaluated.
 This may be due to the fact that RSOP is disabled, or that the WMI service is
 disabled or stopped, or other WMI errors. Make sure that the WMI service
 is started and that the startup type is set to start automatically. New
 Group Policy objects or settings will not be processed until this event is
 resolved.
 ---
 
 How can i get my GPOs to work again?
 
 Thanks for help!
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] GPOs don't work after update from Samba4.0 alpha 17 to 4.0.1

2013-01-27 Thread X-Dimension 
Yes, i have used wmi filters before to set some GPOs for our Windows XP clients 
and some for Windows 7 clients only. 

I have removed the wmi filters from Microsofts Group Policy tool, but it seems 
to have no effect, i still get the same errors.


 Original-Nachricht 
 Datum: Sun, 27 Jan 2013 15:37:41 +0100
 Von: Thomas Manninger dbgtmas...@gmx.at
 An: samba@lists.samba.org
 Betreff: Re: [Samba] GPOs don\'t work after update from Samba4.0 alpha 17 to 
 4.0.1

 Do you used wmi filters for your gpos?
 
  Original-Nachricht 
  Datum: Sun, 27 Jan 2013 13:25:22 +0100
  Von: x-dimens...@gmx.net
  An: samba@lists.samba.org
  Betreff: [Samba] GPOs don\'t work after update from Samba4.0 alpha 17 to
 4.0.1
 
  Hi!
  
  I have updated our server from Samba 4 alpha 17 to Samba 4.0.1.
  Everything seems to work fine after some reconfiguration, but our
  GPOs are not working anymore.
  
  Samba 4 alpha 17 was using ntvfs and the root partition with the sysvol
  share was mounted with user_xattr only in /etc/fstab.
  Samba 4.0.1 is now set to use s3fs and the root partition is mouted with
  user_xattr,acl,barrier=1.
  
  After updating to the newer Samba release i run samba-tool ntacl
  sysvolreset like it was described in the release notes.
  
  Gpresult /H shows me that only the Default Domain Policy is loaded, but
  not all the policies in the OU.
  
  Gpupdate /force shows this error on a client:
  
  ---
  Die Richtlinie wird aktualisiert...
  
  Die Aktualisierung der Benutzerrichtlinie wurde erfolgreich
 abgeschlossen.
  Die Computerrichtlinie konnte nicht erfolgreich aktualisiert werden.
  Folgende Probleme sind aufgetreten:
  
  Fehler bei der Verarbeitung der Gruppenrichtlinie. Der WMI-Filter
 (Windows
  Management Instrumentation) für das Gruppenrichtlinienobjekt
 
 cn={97E400EB-EDFD-4024-A9D5-1BB8261ABE01},cn=policies,cn=system,DC=mynetwork,DC=lan
  konnte nicht ausgewertet werden. Dies kann darauf zurückzuführen sein,
  dass RSoP deaktiviert ist, oder dass der WMI-Dienst deaktiviert oder
  angehalten wurde, bzw. andere WMI-Fehler aufgetreten sind. Stellen Sie
 sicher, dass
  der WMI-Dienst gestartet ist und dass der Starttyp auf automatischen
 Start
  festgelegt ist. Neue Gruppenrichtlinienobjekte oder -einstellungen
 werden
  nicht verarbeitet, bis dieses Ereignis behoben wurde.
  ---
  Google Translate:
  
  The policy is updated ...
  
  Updating the user policy has been successfully completed.The computer
  policy could not be updated successfully. The following problems:
  
  Error processing of Group Policy. The WMI filter (Windows Management
  Instrumentation) for the GPO cn =
 {97E400EB-4024-A9D5-EDFD-1BB8261ABE01}, cn =
  policies, cn = System, DC = mynetwork, DC = lan could not be evaluated.
  This may be due to the fact that RSOP is disabled, or that the WMI
 service is
  disabled or stopped, or other WMI errors. Make sure that the WMI service
  is started and that the startup type is set to start automatically. New
  Group Policy objects or settings will not be processed until this event
 is
  resolved.
  ---
  
  How can i get my GPOs to work again?
  
  Thanks for help!
  -- 
  To unsubscribe from this list go to the following URL and read the
  instructions:  https://lists.samba.org/mailman/options/samba
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba