Problem: Issues in Sysvol: NT STATUS OBJECT NAME NOT FOUND

Titel: Problem: Issues in Sysvol: NT_STATUS_OBJECT_NAME_NOT_FOUND

Problem

The UMC diagnose tool reports issues in Samba and the recommended samba-tool ntacl sysvolreset does not help.
You see errors as follows when starting Samba or doing testparm:

connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service sysvol
get_nt_acl_conn: get_nt_acl returned NT_STATUS_OBJECT_NAME_NOT_FOUND.

Solution

Samba tries to set ACL entries for object in the sysvol share. But these entries are not accepted any more for some reason (ie have been deleted on sysvol but not in GPO editor).

Remove the objects through GPO and/or UMC and the error messages will go away.

To identify these objects you might use a higher loglevel for samba:

ucr set samba/debug/level=4
/etc/init.d/samba restart

Note: Do not forget to reduce the Samba logvel back to 1.

See also:

Mastodon