debug geral:
https://wiki.samba.org/index.php/Samba_AD_DC_Troubleshooting
problemas no acesso às políticas de grupo na pasta sysvol:
getfacl /var/lib/samba/sysvol/samba.aefm.pt/Policies/
resultado:
getfacl: Removing leading '/' from absolute path names
# file: var/lib/samba/sysvol/samba.aefm.pt/Policies/
# owner: root
# group: 3000000
user::rwx
user:root:rwx
user:3000000:rwx
user:3000001:r-x
user:3000002:rwx
user:3000003:r-x
group::rwx
group:3000000:rwx
group:3000001:r-x
group:3000002:rwx
group:3000003:r-x
group:3000008:rwx
mask::rwx
other::---
default:user::rwx
default:user:root:rwx
default:user:3000000:rwx
default:user:3000001:r-x
default:user:3000002:rwx
default:user:3000003:r-x
default:group::---
default:group:3000000:rwx
default:group:3000001:r-x
default:group:3000002:rwx
default:group:3000003:r-x
default:group:3000008:rwx
default:mask::rwx
default:other::---
de seguida gerificar utilizadores com:
wbinfo --gid-info=10013
wbinfo --gid-info=10014
wbinfo --uid-info=3000000
wbinfo --uid-info=3000008
https://lists.samba.org/archive/samba/2017-January/205857.html
https://wiki.samba.org/index.php/Sysvolreset - importante