Hello,
I using Samba 4.10.4-Debian and Samba work as Active Directory. All work
ok, until I try apply GPO to specific security group with guide on link
http://www.rebeladmin.com/2018/04/group-policy-security-filtering/ .
After modify GPO I got error:
root at dc1:~# samba-tool gpo list user5
ERROR(runtime): uncaught exception - Badly formed gPLink ' '
? File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line
185, in _run
??? return self.run(*args, **kwargs)
? File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line 519,
in run
??? glist = parse_gplink(str(msg['gPLink'][0]))
? File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line 102,
in parse_gplink
??? raise RuntimeError("Badly formed gPLink '%s'" % g)
How to fix GPO ?
Hai Ivan, Base on the example link. The users/computer impersonat "SYSTEM" to apply the GPO these days. So i think your missing SYSTEM somewhere. I have myself on such GPO objects only "apply GPO" set on a security group. But in the resulting GPO, SYSTEM is shown also. And you could run : samba-tool ntacl sysvolreset See if that helps also. Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Ivan > Juri?i?? via samba > Verzonden: vrijdag 21 juni 2019 12:25 > Aan: samba at lists.samba.org > Onderwerp: [Samba] Group policy broken > > Hello, > > I using Samba 4.10.4-Debian and Samba work as Active > Directory. All work > ok, until I try apply GPO to specific security group with > guide on link > http://www.rebeladmin.com/2018/04/group-policy-security-filtering/ . > After modify GPO I got error: > > root at dc1:~# samba-tool gpo list user5 > > ERROR(runtime): uncaught exception - Badly formed gPLink ' ' > ? File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line > 185, in _run > ??? return self.run(*args, **kwargs) > ? File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line 519, > in run > ??? glist = parse_gplink(str(msg['gPLink'][0])) > ? File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line 102, > in parse_gplink > ??? raise RuntimeError("Badly formed gPLink '%s'" % g) > > How to fix GPO ? > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >
Hi Louis, I try with "samba-tool ntacl sysvolreset" but still have error "ERROR(runtime): uncaught exception - Badly formed gPLink". Only options is wipe server and start from stratch? On 21. 06. 2019. 13:14, L.P.H. van Belle via samba wrote:> Hai Ivan, > > Base on the example link. > > The users/computer impersonat "SYSTEM" to apply the GPO these days. > So i think your missing SYSTEM somewhere. > > I have myself on such GPO objects only "apply GPO" set on a security group. > But in the resulting GPO, SYSTEM is shown also. > > And you could run : samba-tool ntacl sysvolreset > See if that helps also. > > > Greetz, > > Louis > > > > > > > >> -----Oorspronkelijk bericht----- >> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Ivan >> Juri?i?? via samba >> Verzonden: vrijdag 21 juni 2019 12:25 >> Aan: samba at lists.samba.org >> Onderwerp: [Samba] Group policy broken >> >> Hello, >> >> I using Samba 4.10.4-Debian and Samba work as Active >> Directory. All work >> ok, until I try apply GPO to specific security group with >> guide on link >> http://www.rebeladmin.com/2018/04/group-policy-security-filtering/ . >> After modify GPO I got error: >> >> root at dc1:~# samba-tool gpo list user5 >> >> ERROR(runtime): uncaught exception - Badly formed gPLink ' ' >> ? File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line >> 185, in _run >> ??? return self.run(*args, **kwargs) >> ? File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line 519, >> in run >> ??? glist = parse_gplink(str(msg['gPLink'][0])) >> ? File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line 102, >> in parse_gplink >> ??? raise RuntimeError("Badly formed gPLink '%s'" % g) >> >> How to fix GPO ? >> >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >> >> >
No, a wipe is not needed. Do you know which GPO it is? You can remove/move the conflicting one. Your problem might be one of these, have a look at these bugreports. https://bugzilla.samba.org/show_bug.cgi?id=13564 https://bugzilla.samba.org/show_bug.cgi?id=13993 Try to find the conflicting one. And make sure you have a backup of the sysvol. Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Ivan > Juri?i?? via samba > Verzonden: woensdag 26 juni 2019 9:19 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Group policy broken > > Hi Louis, > > I try with "samba-tool ntacl sysvolreset" but still have error > "ERROR(runtime): uncaught exception - Badly formed gPLink". > > Only options is wipe server and start from stratch? > > On 21. 06. 2019. 13:14, L.P.H. van Belle via samba wrote: > > Hai Ivan, > > > > Base on the example link. > > > > The users/computer impersonat "SYSTEM" to apply the GPO these days. > > So i think your missing SYSTEM somewhere. > > > > I have myself on such GPO objects only "apply GPO" set on a > security group. > > But in the resulting GPO, SYSTEM is shown also. > > > > And you could run : samba-tool ntacl sysvolreset > > See if that helps also. > > > > > > Greetz, > > > > Louis > > > > > > > > > > > > > > > >> -----Oorspronkelijk bericht----- > >> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Ivan > >> Juri?i?? via samba > >> Verzonden: vrijdag 21 juni 2019 12:25 > >> Aan: samba at lists.samba.org > >> Onderwerp: [Samba] Group policy broken > >> > >> Hello, > >> > >> I using Samba 4.10.4-Debian and Samba work as Active > >> Directory. All work > >> ok, until I try apply GPO to specific security group with > >> guide on link > >> > http://www.rebeladmin.com/2018/04/group-policy-security-filtering/ . > >> After modify GPO I got error: > >> > >> root at dc1:~# samba-tool gpo list user5 > >> > >> ERROR(runtime): uncaught exception - Badly formed gPLink ' ' > >> ? File > "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line > >> 185, in _run > >> ??? return self.run(*args, **kwargs) > >> ? File > "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line 519, > >> in run > >> ??? glist = parse_gplink(str(msg['gPLink'][0])) > >> ? File > "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line 102, > >> in parse_gplink > >> ??? raise RuntimeError("Badly formed gPLink '%s'" % g) > >> > >> How to fix GPO ? > >> > >> > >> -- > >> To unsubscribe from this list go to the following URL and read the > >> instructions: https://lists.samba.org/mailman/options/samba > >> > >> > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >