Serg Serg
2018-Aug-27 18:07 UTC
[Samba] samba_gpoupdate: TypeError: 'NoneType' object is not iterable
Hello, samba team. I provisioned Samba 4.8 wich compiled from sources as DC with --use-rfc2307 parameters. It is fresh installation of Domain controller. All functions are working, but i can not enable (apply group policies = yes) parameter,to provide Default Domain Password policies from GPO. That I did wrong? Thank you. root at dc4samba:~# cat /usr/local/samba/etc/smb.conf # Global parameters [global] netbios name = dc4samba realm = OFFICE.SAMBA4TEST.NET server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate workgroup = OFFICE winbind nss info = rfc2307 idmap_ldb:use rfc2307 = yes dsdb:schema update allowed = yes apply group policies = yes [netlogon] path = /var/lib/samba/locks/sysvol/office.samba4test.net/scripts read only = No [sysvol] path = /var/lib/samba/locks/sysvol read only = No root at dc4samba:~# cat /etc/nsswitch.conf passwd: files winbind group: files winbind shadow: files gshadow: files hosts: files mdns4_minimal [NOTFOUND=return] dns networks: files protocols: db files services: db files ethers: db files rpc: db files netgroup: nis root at dc4samba:~# getfacl /var/lib/samba/locks/sysvol/ office.samba4test.net/Policies # file: var/lib/samba/locks/sysvol/office.samba4test.net/Policies # owner: root # group: BUILTIN\134administrators user::rwx user:root:rwx user:3000000:rwx user:3000001:r-x user:3000002:rwx user:3000003:r-x user:3000008:rwx group::rwx group:BUILTIN\134administrators:rwx group:BUILTIN\134server\040operators:r-x group:NT\040AUTHORITY\134system:rwx group:NT\040AUTHORITY\134authenticated\040users:r-x group:OFFICE\134group\040policy\040creator\040owners:rwx mask::rwx other::--- default:user::rwx default:user:root:rwx default:user:3000000:rwx default:user:3000001:r-x default:user:3000002:rwx default:user:3000003:r-x default:user:3000008:rwx default:group::--- default:group:BUILTIN\134administrators:rwx default:group:BUILTIN\134server\040operators:r-x default:group:NT\040AUTHORITY\134system:rwx default:group:NT\040AUTHORITY\134authenticated\040users:r-x default:group:OFFICE\134group\040policy\040creator\040owners:rwx default:mask::rwx default:other::--- root at dc4samba:~# id administrator uid=0(root) gid=0(root) groups=0(root) root at dc4samba:~# id dc4samba$ uid=3000017(OFFICE\dc4samba$) gid=100(users) groups=100(users),3000017(OFFICE\dc4samba$),3000018(OFFICE\domain controllers), 3000005(OFFICE\denied rodc password replication group),3000009(BUILTIN\users) root at dc4samba:~# getent passwd dc4samba$ OFFICE\dc4samba$:*:3000017:100::/home/OFFICE/dc4samba_:/bin/false root at dc4samba:~# getent passwd administrator OFFICE\administrator:*:0:100::/home/OFFICE/administrator:/bin/false Aug 27 10:35:42 dc4samba samba: root process[1217] [2018/08/27 10:35:42.277792, 0] ../source4/smbd/server.c:466(binary_smbd_main) Aug 27 10:35:42 dc4samba samba: root process[1217] samba version 4.8.0 started. Aug 27 10:35:42 dc4samba samba: root process[1217] Copyright Andrew Tridgell and the Samba Team 1992-2018 Aug 27 10:35:42 dc4samba systemd[1]: samba-ad-dc.service: PID file /var/lib/samba/run/samba.pid not readable (yet?) after start: No such file or directory Aug 27 10:35:42 dc4samba systemd[1]: Started Samba Active Directory Domain Controller. Aug 27 10:35:42 dc4samba systemd[1]: Reached target Multi-User System. Aug 27 10:35:42 dc4samba systemd[1]: Reached target Graphical Interface. Aug 27 10:35:42 dc4samba systemd[1]: Starting Update UTMP about System Runlevel Changes... Aug 27 10:35:42 dc4samba systemd[1]: Started Update UTMP about System Runlevel Changes. Aug 27 10:35:42 dc4samba systemd[1]: Startup finished in 7.307s (kernel) + 18.414s (userspace) = 25.721s. Aug 27 10:35:44 dc4samba samba: root process[1220] [2018/08/27 10:35:44.660897, 0] ../source4/smbd/server.c:638(binary_smbd_main) Aug 27 10:35:44 dc4samba samba: root process[1220] binary_smbd_main: samba: using 'standard' process model Aug 27 10:35:44 dc4samba samba: root process[1220] [2018/08/27 10:35:44.733836, 0] ../lib/util/become_daemon.c:138(daemon_ready) Aug 27 10:35:44 dc4samba samba: root process[1220] daemon_ready: STATUS=daemon 'samba' finished starting up and ready to serve connections Aug 27 10:35:45 dc4samba winbindd[1295]: [2018/08/27 10:35:45.669071, 0] ../source3/winbindd/winbindd_cache.c:3160(initialize_winbindd_cache) Aug 27 10:35:45 dc4samba winbindd[1295]: initialize_winbindd_cache: clearing cache and re-creating with version number 2 Aug 27 10:35:46 dc4samba winbindd[1295]: [2018/08/27 10:35:46.471735, 0] ../lib/util/become_daemon.c:138(daemon_ready) Aug 27 10:35:46 dc4samba winbindd[1295]: daemon_ready: STATUS=daemon 'winbindd' finished starting up and ready to serve connections Aug 27 10:35:48 dc4samba smbd[1290]: [2018/08/27 10:35:48.004643, 0] ../lib/util/become_daemon.c:138(daemon_ready) Aug 27 10:35:48 dc4samba smbd[1290]: daemon_ready: STATUS=daemon 'smbd' finished starting up and ready to serve connections Aug 27 10:35:48 dc4samba systemd[1]: Created slice User Slice of ld-admin. Aug 27 10:35:48 dc4samba systemd[1]: Starting User Manager for UID 1000... Aug 27 10:35:48 dc4samba systemd[1]: Started Session 1 of user ld-admin. Aug 27 10:36:01 dc4samba systemd[1]: Time has been changed Aug 27 10:36:01 dc4samba systemd[1441]: Time has been changed Aug 27 10:36:01 dc4samba systemd[1441]: Reached target Paths. Aug 27 10:36:01 dc4samba systemd[1441]: Reached target Sockets. Aug 27 10:36:01 dc4samba systemd[1441]: Reached target Timers. Aug 27 10:36:01 dc4samba systemd[1441]: Reached target Basic System. Aug 27 10:36:01 dc4samba systemd[1441]: Reached target Default. Aug 27 10:36:01 dc4samba systemd[1441]: Startup finished in 365ms. Aug 27 10:36:01 dc4samba systemd[1]: Started User Manager for UID 1000. Aug 27 10:36:05 dc4samba winbindd[1295]: [2018/08/27 10:36:05.390484, 0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler) Aug 27 10:36:05 dc4samba winbindd[1295]: /usr/local/samba/sbin/samba_gpoupdate: Traceback (most recent call last): Aug 27 10:36:05 dc4samba winbindd[1295]: [2018/08/27 10:36:05.391162, 0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler) Aug 27 10:36:05 dc4samba winbindd[1295]: /usr/local/samba/sbin/samba_gpoupdate: File "/usr/local/samba/sbin/samba_gpoupdate", line 176, in <module> Aug 27 10:36:05 dc4samba winbindd[1295]: [2018/08/27 10:36:05.391563, 0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler) Aug 27 10:36:05 dc4samba winbindd[1295]: /usr/local/samba/sbin/samba_gpoupdate: apply_gp(lp, creds, test_ldb, logger, store, gp_extensions) Aug 27 10:36:05 dc4samba winbindd[1295]: [2018/08/27 10:36:05.391935, 0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler) Aug 27 10:36:05 dc4samba winbindd[1295]: /usr/local/samba/sbin/samba_gpoupdate: File "/usr/local/samba/sbin/samba_gpoupdate", line 70, in apply_gp Aug 27 10:36:05 dc4samba winbindd[1295]: [2018/08/27 10:36:05.392274, 0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler) Aug 27 10:36:05 dc4samba winbindd[1295]: /usr/local/samba/sbin/samba_gpoupdate: for gpo_obj in gpos: Aug 27 10:36:05 dc4samba winbindd[1295]: [2018/08/27 10:36:05.392657, 0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler) Aug 27 10:36:05 dc4samba winbindd[1295]: /usr/local/samba/sbin/samba_gpoupdate: TypeError: 'NoneType' object is not iterable