Thanks everyone for the reply. But actually the samba documentation: https://wiki.samba.org/index.php/Group_Policy#SSSD and from David Mulder(dmulder): https://dmulder.github.io/group-policy-book/policy-refresh.html#sssd-refresh It makes it clear that sssd does support samba AD GPOs and to work it needs oddjob-gpupdate and samba-gpupdate (command installed with samba). As I don't know the cause of the problem, if I compiled the code the wrong way or not I decided to ask. Hopefully someone like David Mulder or someone else can help me. Thank you all. Em sex., 14 de abr. de 2023 ?s 06:28, Rowland Penny via samba < samba at lists.samba.org> escreveu:> > > On 14/04/2023 09:23, Anderson Sampaio Mello via samba wrote: > > Hello Samba Team, how are you? > > > > I'm joining linux clients in the company's environment and I would like > to > > apply GPOs to linux clients, I'm in the testing phase. > > > > I'm testing with ubuntu clients version 22.04 and the software I used to > > join the samba AD was sssd. > > > > > Samba does not provide or support sssd (which has its own GPO > mechanism), so it may have never been tested in the way you are running > it. You will probably get better support by contacting the sssd-users > mailing list. > > Rowland > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >
On 14/04/2023 15:51, Anderson Sampaio Mello via samba wrote:> Thanks everyone for the reply. > > But actually the samba documentation: > > https://wiki.samba.org/index.php/Group_Policy#SSSD > > and from David Mulder(dmulder): > > https://dmulder.github.io/group-policy-book/policy-refresh.html#sssd-refresh > > It makes it clear that sssd does support samba AD GPOs and to work it needs > oddjob-gpupdate and samba-gpupdate (command installed with samba). > > As I don't know the cause of the problem, if I compiled the code the wrong > way or not I decided to ask. > > Hopefully someone like David Mulder or someone else can help me. > > Thank you all. >Reading the relevant portions of the policy-refresh.html, it appears that you should either allow winbind to apply the GPO's or sssd, not both. If you are using sssd to apply the GPO's, then you are asking in the wrong place, you should be asking on the sssd-users mailing list. Samba does not produce sssd, so, unless someone is using it and knows the pitfalls & fixes, you will be better asking on the correct list. Rowland