search for: libgpo

...error when building samba with current "samba-4.0.0alpha17" shipped with the sogo/openchange source. The error message is shown below. "‘struct registry_value’ has no member named ‘type’" is caused by gpo_reg.c in "samba4/source3/libgpo/gpo_reg.c" ??? line: 174: ??????? reg_val.type = REG_SZ;... 192:??????? reg_val.type = REG_DWORD; 213:??????? if (reg_val->type != REG_SZ) {... 238:??????? if (reg_val->type != REG_DWORD) {... whereas "samba4/source4/lib/registry/registry.h" line 264-269 has: struct registry_...

...I drop "--without-ldap" the compile is successful but I have no need for ldap in the installed environment and I see no reason that anything to do with GPO would be necessary when the configure includes "--without-ads --without-ldap --without-ad-dc". Seems to be a mistake that libgpo/pygpo.c is even attempted as part of the make in such an environment. The failure: ============================================= [1939/3416] Compiling libgpo/pygpo.c ../libgpo/pygpo.c: In function ‘find_samaccount’: ../libgpo/pygpo.c:340:11: warning: implicit declaration of function ‘ads_do_search...

...the ADMX templates (Administrative Templates): https://dmulder.github.io/group-policy-book/install-admx.html#install-admx-samba If you've already installed them, then you should know there is actually a bug. GPMC doesn't read templates with a space ' ' in the name. Rename 'libgpo/admx/GNOME Settings.admx' and 'libgpo/admx/en-US/GNOME Settings.adml' to use an underscore instead of a space. This is already fixed in Samba master. Perhaps we should backport this? Like this: libgpo/admx/GNOME_Settings.admx libgpo/admx/en-US/GNOME_Settings.adml -- David Mulder La...

...arecommand.xml: <literal>SeDiskOperatorPrivilege</literal>. docs-xml/smbdotconf/misc/changesharecommand.xml: <literal>SeDiskOperatorPrivilege</literal>. docs-xml/smbdotconf/misc/deletesharecommand.xml: <literal>SeDiskOperatorPrivilege</literal>. libgpo/admx/en-US/samba.adml: In order to successfully execute the add share command, smbd requires that the administrator connects using a root account (i.e. uid == 0) or has the SeDiskOperatorPrivilege. Scripts defined in the add share command parameter are executed as root. libgpo/admx/en-US/samba.adml...

...ast half-right, after all. I just opened the files contained in the last Samba release (contained in samba-4.6.5.tar.gz) and although the typos have been corrected in "./python/samba/provision/__init__.py", *they are still there* in "./examples/misc/adssearch.pl" and "./libgpo/gpo_util.c". It happened that, before my first post, I had peeked into "./examples/misc/adssearch.pl" and it was there, that's why I posted. Can we solve this very simple matter once and for all? If I can help in any way, I will gladly do it.

Hi, Im attempting to apply a few group policy settings but they dont seem to be applying on the machine in question, or some settings I cannot see in the GPME. 1. Settings applied to openssh dont seem to create the required config files in /etc/ssh/sshd_config.d/ for ssh to actually pick up on these changes. Is there a different location its applying these to that I can verify with? Below is

Well, I had a look at the python bindings and the error handling was in shambles. I fixed libgpo/pygpo.c and I now get: gpos = ads.get_gpo_list(creds.get_username()) SystemError: Failed to get machine token for 'DC01$' (CN=DC01,OU=Domain Controllers,DC=rvx,DC=is) (the failing call is status = gp_get_machine_token(self->ads_ptr, frame, dn,...

On Tue, 11 Jun 2024 15:52:45 +0100 Luis Peromarta via samba <samba at lists.samba.org> wrote: > Again, my exact same experience. > > LP > On Jun 11, 2024 at 14:58 +0100, Bailey Allison via samba > <samba at lists.samba.org>, wrote: > > Hey Rowland, > > > > Just wanted to say you are 100% correct, and it does (seemingly) > > nothing, at least

...;literal>SeDiskOperatorPrivilege</literal>. > docs-xml/smbdotconf/misc/changesharecommand.xml: > <literal>SeDiskOperatorPrivilege</literal>. > docs-xml/smbdotconf/misc/deletesharecommand.xml: > <literal>SeDiskOperatorPrivilege</literal>. > > > libgpo/admx/en-US/samba.adml: In order to successfully execute the > add share command, smbd requires that the administrator connects > using a root account (i.e. uid == 0) or has the > SeDiskOperatorPrivilege. Scripts defined in the add share command > parameter are executed as root. libgpo/a...

...000074" works and returns information, but this library function fails. This is then propagated upwards as a memory error, because it is being called from getpwuid_alloc() which is a talloc variant. the api doesn't allow us to distinguish either form of error. Later, there is this code (in libgpo) new_token = create_local_nt_token(mem_ctx, &object_sid, false, num_token_sids, token_sids); ADS_ERROR_HAVE_NO_MEMORY(new_token); where the failure of create_local_nt_token() is simply assumed to be a memory failure. This pretty much destroys any finess in lower level error handling... Now,...

...turns information, but this > library function fails. > This is then propagated upwards as a memory error, because it is being > called from getpwuid_alloc() which is a talloc variant. the api > doesn't allow us to distinguish either form of error. > Later, there is this code (in libgpo) > new_token = create_local_nt_token(mem_ctx, &object_sid, false, > num_token_sids, token_sids); > ADS_ERROR_HAVE_NO_MEMORY(new_token); > where the failure of create_local_nt_token() is simply assumed to be a > memory failure. This pretty much destroys any finess in lower leve...

...fails to list snapshots from shares with GlusterFS backend. o Jeremy Allison <jra at samba.org> * BUG 12559: Fix for Solaris C compiler. * BUG 12628: s3: locking: Update oplock optimization for the leases era. * BUG 12693: Make the Solaris C compiler happy. * BUG 12695: s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes. * BUG 12747: Fix buffer overflow caused by wrong use of getgroups. o Hanno Boeck <hanno at hboeck.de> * BUG 12746: lib: debug: Avoid negative array access. * BUG 12748: cleanupdb: Fix a memory read e...

...fails to list snapshots from shares with GlusterFS backend. o Jeremy Allison <jra at samba.org> * BUG 12559: Fix for Solaris C compiler. * BUG 12628: s3: locking: Update oplock optimization for the leases era. * BUG 12693: Make the Solaris C compiler happy. * BUG 12695: s3: libgpo: Allow skipping GPO objects that don't have the expected LDAP attributes. * BUG 12747: Fix buffer overflow caused by wrong use of getgroups. o Hanno Boeck <hanno at hboeck.de> * BUG 12746: lib: debug: Avoid negative array access. * BUG 12748: cleanupdb: Fix a memory read e...

...es like Kerberos authentication. The downside is that breaks the options interface. The support for smbgetrc has been removed. You can use an authentication file if needed, this is documented in the manpage. Please check the smbget manpage or --help output. gpupdate changes ---------------- The libgpo.get_gpo_list function has been deprecated in favor of an implementation written in python. The new function can be imported via `import samba.gp`. The python implementation connects to Active Directory using the SamDB module, instead of ADS (which is what libgpo uses). Improved winbind logging and...

...es like Kerberos authentication. The downside is that breaks the options interface. The support for smbgetrc has been removed. You can use an authentication file if needed, this is documented in the manpage. Please check the smbget manpage or --help output. gpupdate changes ---------------- The libgpo.get_gpo_list function has been deprecated in favor of an implementation written in python. The new function can be imported via `import samba.gp`. The python implementation connects to Active Directory using the SamDB module, instead of ADS (which is what libgpo uses). Improved winbind logging and...

...es like Kerberos authentication. The downside is that breaks the options interface. The support for smbgetrc has been removed. You can use an authentication file if needed, this is documented in the manpage. Please check the smbget manpage or --help output. gpupdate changes ---------------- The libgpo.get_gpo_list function has been deprecated in favor of an implementation written in python. The new function can be imported via `import samba.gp`. The python implementation connects to Active Directory using the SamDB module, instead of ADS (which is what libgpo uses). Improved winbind logging and...

...es like Kerberos authentication. The downside is that breaks the options interface. The support for smbgetrc has been removed. You can use an authentication file if needed, this is documented in the manpage. Please check the smbget manpage or --help output. gpupdate changes ---------------- The libgpo.get_gpo_list function has been deprecated in favor of an implementation written in python. The new function can be imported via `import samba.gp`. The python implementation connects to Active Directory using the SamDB module, instead of ADS (which is what libgpo uses). Improved winbind logging and...

In April 2016 I reported the following typos in three source files related to sysvol and GPOs. ./examples/misc/adssearch.pl:357:"Default Domain Controllers Policy" => "6AC1786C-016F-11D2-945F-00C04fB984F9" ./libgpo/gpo_util.c:46: "6AC1786C-016F-11D2-945F-00C04fB984F9" } ./python/samba/provision/__init__.py:123:DEFAULT_DC_POLICY_GUID = "6AC1786C-016F-11D2-945F-00C04fB984F9" Note the lowercase "f" in the last numeric group in those three lines. Policy IDs normally have uppercase...

...at lists.samba.org> wrote: > In April 2016 I reported the following typos in three source files > related to sysvol and GPOs. > > ./examples/misc/adssearch.pl:357:"Default Domain Controllers Policy" > => "6AC1786C-016F-11D2-945F-00C04fB984F9" > > ./libgpo/gpo_util.c:46: "6AC1786C-016F-11D2-945F-00C04fB984F9" } > > ./python/samba/provision/__init__.py:123:DEFAULT_DC_POLICY_GUID = > "6AC1786C-016F-11D2-945F-00C04fB984F9" > > Note the lowercase "f" in the last numeric group in those three > lines. Polic...

...all. > > I just opened the files contained in the last Samba release > (contained in samba-4.6.5.tar.gz) and although the typos have been > corrected in "./python/samba/provision/__init__.py", *they are still > there* in "./examples/misc/adssearch.pl" and "./libgpo/gpo_util.c". > > It happened that, before my first post, I had peeked into > "./examples/misc/adssearch.pl" and it was there, that's why I posted. > > Can we solve this very simple matter once and for all? If I can help > in any way, I will gladly do it. >...