search for: samba_gpoupd

...DC. It was an update from 4.7 (not an in place update, but added new DC's to existing domain and demoted 4.7.x DC's). After adding to my smb.conf: /apply group policies = yes/ I see errors on samba star: ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)   /usr/local/samba/sbin/samba_gpoupdate: SID S-1-5-21-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx -> getpwuid(3000002) failed [2018/07/02 10:21:45.885124,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)  /usr/local/samba/sbin/samba_gpoupdate: Traceback (most recent call last): ./lib/util/util_runcmd.c:327(samba_runcmd_io_handler)...

...update, but added new DC's > to existing domain and demoted 4.7.x DC's). > > After adding to my smb.conf: > > /apply group policies = yes/ > > > I see errors on samba star: > > ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler) >   /usr/local/samba/sbin/samba_gpoupdate: SID > S-1-5-21-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx -> getpwuid(3000002) failed > [2018/07/02 10:21:45.885124,  0] > ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler) >  /usr/local/samba/sbin/samba_gpoupdate: Traceback (most recent call > last): > ./lib/util/util_runcmd.c...

...[1441]: Startup finished in 365ms. Aug 27 10:36:01 dc4samba systemd[1]: Started User Manager for UID 1000. Aug 27 10:36:05 dc4samba winbindd[1295]: [2018/08/27 10:36:05.390484, 0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler) Aug 27 10:36:05 dc4samba winbindd[1295]: /usr/local/samba/sbin/samba_gpoupdate: Traceback (most recent call last): Aug 27 10:36:05 dc4samba winbindd[1295]: [2018/08/27 10:36:05.391162, 0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler) Aug 27 10:36:05 dc4samba winbindd[1295]: /usr/local/samba/sbin/samba_gpoupdate: File "/usr/local/samba/sbin/samba_gpoupdate...

Hi, I just upgraded to 4.8.9 and decided to give the samba_gpoupdate feature a whirl. However, it fails. The line that's failing is "gpos = ads.get_gpo_list(creds.get_username())" returning None. This is probably a failure, since it should otherwise return an empty list (if there were no gpos to return). But there is no output to indicate what may...

...t 13:10, Rowland Penny via samba < > samba at lists.samba.org> wrote: > >> On Mon, 25 Feb 2019 12:56:59 +0000 >> Kristján Valur Jónsson via samba <samba at lists.samba.org> wrote: >> >> > Hi, >> > I just upgraded to 4.8.9 and decided to give the samba_gpoupdate >> > feature a whirl. >> > However, it fails. >> > The line that's failing is "gpos = >> > ads.get_gpo_list(creds.get_username())" returning None. >> > >> > This is probably a failure, since it should otherwise return an empty &...

...st. K On Mon, 25 Feb 2019 at 13:10, Rowland Penny via samba <samba at lists.samba.org> wrote: > On Mon, 25 Feb 2019 12:56:59 +0000 > Kristján Valur Jónsson via samba <samba at lists.samba.org> wrote: > > > Hi, > > I just upgraded to 4.8.9 and decided to give the samba_gpoupdate > > feature a whirl. > > However, it fails. > > The line that's failing is "gpos = > > ads.get_gpo_list(creds.get_username())" returning None. > > > > This is probably a failure, since it should otherwise return an empty > > list (if there...

On Tue, 26 Feb 2019 13:34:32 +0000 Kristján Valur Jónsson <kristjan at rvx.is> wrote: > Ok, I've analyzed this and found that the cause is a call to > getpwuid(uid) with the uid being that of the domain controller. > "wbinfo --uid-info=3000074" works and returns information, but this > library function fails. > This is then propagated upwards as a memory error,

...ation > ------------------- > > Adds Group Policy support for the Samba kdc. Applies password policies > (minimum/maximum password age, minimum password length, and password > complexity) and kerberos policies (user/service ticket lifetime and > renew lifetime). > > Adds the samba_gpoupdate script for applying and unapplying > policy. Can be applied automatically by setting > > 'apply group policies = yes'. > Hello,     I have a few questions on the above. My upgrades since Samba 4.0 has always been in place as reference. The first change regarding 'New...

On Tue, 3 Jul 2018 08:06:44 +0200 Kacper Wirski via samba <samba at lists.samba.org> wrote: > Hello, > > I've realised that there was an error on this server, wrong > idmap.ldb, 3000002 should be one of the built-in users or groups > instead of machine own account. Unfortunately fixing idmap (I > imported idmap.ldb from DC with correct mapping) didn't fix my >

...esting is used. * Bump build-depends tevent >= 0.9.36~ * Removed : Fix-spelling.patch, does not apply to 4.7.8 * changed d/rules, check if systemd service files exist before move - remove syslog.target from service files, refers to an obsolete target. * changed d/samba.install remove samba_gpoupdate not in 4.7.8 * changed d/samba-libs.install remove libgpext.so.0 not in 4.7.8 * changed d/samba.lintian-override added samba_ files no man page. * changed d/samba-common-bin.lintian-override added : samba_kcc no man page. * removed changelog parts from 4.7.8 up to 4.8.2 due to lintian wa...

...S ==================== KDC GPO application ------------------- Adds Group Policy support for the Samba kdc. Applies password policies (minimum/maximum password age, minimum password length, and password complexity) and kerberos policies (user/service ticket lifetime and renew lifetime). Adds the samba_gpoupdate script for applying and unapplying policy. Can be applied automatically by setting 'server services = +gpoupdate'. Time Machine Support with vfs_fruit ----------------------------------- Samba can be configured as a Time Machine target for Apple Mac devices through the vfs_fruit modu...

...S ==================== KDC GPO application ------------------- Adds Group Policy support for the Samba kdc. Applies password policies (minimum/maximum password age, minimum password length, and password complexity) and kerberos policies (user/service ticket lifetime and renew lifetime). Adds the samba_gpoupdate script for applying and unapplying policy. Can be applied automatically by setting 'server services = +gpoupdate'. Time Machine Support with vfs_fruit ----------------------------------- Samba can be configured as a Time Machine target for Apple Mac devices through the vfs_fruit modu...

...S ==================== KDC GPO application ------------------- Adds Group Policy support for the Samba kdc. Applies password policies (minimum/maximum password age, minimum password length, and password complexity) and kerberos policies (user/service ticket lifetime and renew lifetime). Adds the samba_gpoupdate script for applying and unapplying policy. Can be applied automatically by setting 'server services = +gpoupdate'. Time Machine Support with vfs_fruit ----------------------------------- Samba can be configured as a Time Machine target for Apple Mac devices through the vfs_fruit modu...

...S ==================== KDC GPO application ------------------- Adds Group Policy support for the Samba kdc. Applies password policies (minimum/maximum password age, minimum password length, and password complexity) and kerberos policies (user/service ticket lifetime and renew lifetime). Adds the samba_gpoupdate script for applying and unapplying policy. Can be applied automatically by setting 'server services = +gpoupdate'. Time Machine Support with vfs_fruit ----------------------------------- Samba can be configured as a Time Machine target for Apple Mac devices through the vfs_fruit modu...

...S ==================== KDC GPO application ------------------- Adds Group Policy support for the Samba kdc. Applies password policies (minimum/maximum password age, minimum password length, and password complexity) and kerberos policies (user/service ticket lifetime and renew lifetime). Adds the samba_gpoupdate script for applying and unapplying policy. Can be applied automatically by setting 'apply group policies = yes'. Time Machine Support with vfs_fruit ----------------------------------- Samba can be configured as a Time Machine target for Apple Mac devices through the vfs_fruit module...

...S ==================== KDC GPO application ------------------- Adds Group Policy support for the Samba kdc. Applies password policies (minimum/maximum password age, minimum password length, and password complexity) and kerberos policies (user/service ticket lifetime and renew lifetime). Adds the samba_gpoupdate script for applying and unapplying policy. Can be applied automatically by setting 'apply group policies = yes'. Time Machine Support with vfs_fruit ----------------------------------- Samba can be configured as a Time Machine target for Apple Mac devices through the vfs_fruit module...

...e upgrade note above). KDC GPO application ------------------- Adds Group Policy support for the Samba kdc. Applies password policies (minimum/maximum password age, minimum password length, and password complexity) and kerberos policies (user/service ticket lifetime and renew lifetime). Adds the samba_gpoupdate script for applying and unapplying policy. Can be applied automatically by setting 'apply group policies = yes'. Time Machine Support with vfs_fruit ----------------------------------- Samba can be configured as a Time Machine target for Apple Mac devices through the vfs_fruit module...

...e upgrade note above). KDC GPO application ------------------- Adds Group Policy support for the Samba kdc. Applies password policies (minimum/maximum password age, minimum password length, and password complexity) and kerberos policies (user/service ticket lifetime and renew lifetime). Adds the samba_gpoupdate script for applying and unapplying policy. Can be applied automatically by setting 'apply group policies = yes'. Time Machine Support with vfs_fruit ----------------------------------- Samba can be configured as a Time Machine target for Apple Mac devices through the vfs_fruit module...

...e upgrade note above). KDC GPO application ------------------- Adds Group Policy support for the Samba kdc. Applies password policies (minimum/maximum password age, minimum password length, and password complexity) and kerberos policies (user/service ticket lifetime and renew lifetime). Adds the samba_gpoupdate script for applying and unapplying policy. Can be applied automatically by setting 'apply group policies = yes'. Time Machine Support with vfs_fruit ----------------------------------- Samba can be configured as a Time Machine target for Apple Mac devices through the vfs_fruit module...

...support = No > enable core files = Yes > enable privileges = Yes > encrypt passwords = Yes > enhanced browsing = Yes > enumports command = /usr/local/bin/show-ports.sh > eventlog list = > get quota command = > getwd cache = Yes > gpo update command = /usr/local/samba/sbin/samba_gpoupdate > guest account = nobody > homedir map = auto.home > host msdfs = Yes > hostname lookups = No > idmap backend = tdb > idmap cache time = 604800 > idmap gid = > idmap negative cache time = 120 > idmap uid = > include system krb5 conf = Yes > init logon delay = 100...