samba - Jun 2015 - How Can I create a group policies with Samba?

Not sure if you are asking about server or client.  Are you asking about :

   1. Pushing GPOs via Linux SaMBa Server to Windows machines?
   1. i believe this has been somewhat doable for years using a windows
      workstation mmc pointed at a Samba Server.
   2. Pushing GPOs via Linux SaMBa Server to Linux machines?
      1. At least four years ago, LikeWise.com had some very limited GPO
      support for Linux clients.


Other options to research would be "Desired State Configuration" and
or
otherwise move to a devops flavor of configuration management.  MS AD GPOs
are in XML and should to some extent be parseable by anything.



On Thu, Jun 11, 2015 at 9:42 AM Marc Muehlfeld <mmuehlfeld at samba.org>
wrote:
> Hello Jason
>
> Am 06.06.2015 um 19:24 schrieb Jason Long:
> > Hello Experts.Can I implement any group policy via Samba in Linux?
> > For example, In Windows OS you can write a Group policy for disable
> > specific application or hide partitions and when the user
> > logging into the PC the Policy execute on his system
> > automatically, But how about Linux?
>
> There's nothing on *nix interpreting GPOs.
>
> I think it would be a great project, but not that easy to implement. It
> need interfaces to different services like pam for passwort and login
> management, write/edit config files (global and per user), etc.
>
>
> Regards,
> Marc
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

I mean is that If we have 2000 Linux clients with Red Hat or CentOS server and
want to write a policy for Clients that a network location mapped automatically
on them, What should we do?


     On Thursday, June 11, 2015 11:42 PM, Rob Townley <rob.townley at
gmail.com> wrote:
   

 Not sure if you are asking about server or client.? Are you asking about :   
   - Pushing GPOs via Linux SaMBa Server to Windows machines?   

   
   - i believe this has been somewhat doable for years using a windows
workstation mmc pointed at a Samba Server. ?
   
   - Pushing GPOs via Linux SaMBa Server to Linux machines?
   
   - At least four years ago, LikeWise.com had some very limited GPO support for
Linux clients.


Other options to research would be "Desired State Configuration" and
or otherwise move to a devops flavor of configuration management.? MS AD GPOs
are in XML and should to some extent be parseable by anything. ?


On Thu, Jun 11, 2015 at 9:42 AM Marc Muehlfeld <mmuehlfeld at samba.org>
wrote:

Hello Jason

Am 06.06.2015 um 19:24 schrieb Jason Long:
> Hello Experts.Can I implement any group policy via Samba in Linux?
> For example, In Windows OS you can write a Group policy for disable
> specific application or hide partitions and when the user
> logging into the PC the Policy execute on his system
> automatically, But how about Linux?
There's nothing on *nix interpreting GPOs.

I think it would be a great project, but not that easy to implement. It
need interfaces to different services like pam for passwort and login
management, write/edit config files (global and per user), etc.


Regards,
Marc
--
To unsubscribe from this list go to the following URL and read the
instructions:? https://lists.samba.org/mailman/options/samba

Hello Jason,

Am 13.06.2015 um 16:36 schrieb Jason Long:
> I mean is that If we have 2000 Linux clients with Red Hat or
> CentOS server and want to write a policy for Clients that a network
> location mapped automatically on them, What should we do? 
At work I use autofs for that. If a user ls/cd/.. in a defined
directory, autofs mounts the share with the user credentials to that
place. No need for the user to enter his/her credentials or store them
in a file or something. If the user is authenticated at KDE login
against the domain via winbind, then autofs does the rest.

I've created a kickstart file and put it on the install DVD. So when
ever someone installs a new CentOS7 client, everything is automatically
there (smb.conf, autofs configs). If the machine should be a domain
member, it just has to be joined to the domain. Works great for all
Linux users at work.


Regards,
Marc