--- /usr/lib/python2.7/dist-packages/samba/provision/__init__.py.orig	2017-08-24 22:23:18.349454000 +0200
+++ /usr/lib/python2.7/dist-packages/samba/provision/__init__.py	2017-08-24 22:23:22.361454000 +0200
@@ -1676,7 +1676,7 @@ def check_dir_acl(path, acl, lp, domains
     acl_sddl = sd.as_sddl(sid)
     
     if fsacl_sddl != acl_sddl:
-        raise ProvisioningError('%s NTACL of GPO directory %s %s does not match value %s expected from GPO object' % (acl_type(direct_db_access), path, fsacl_sddl, acl_sddl))
+        raise ProvisioningError('%s NTACL of GPO directory %s %s does not match value %s expected from GPO object' % (acl_type(direct_db_access), path, fsacl_sddl, acl))
 
     for root, dirs, files in os.walk(path, topdown=False):
         for name in files: