similar to: GPO Linux file policy Problem

Hello Samba Team, how are you? I'm joining linux clients in the company's environment and I would like to apply GPOs to linux clients, I'm in the testing phase. I'm testing with ubuntu clients version 22.04 and the software I used to join the samba AD was sssd. The 22.04 ubuntu client has joined and everything is working fine except for the GPOs for linux clients. I compiled

On 4/14/23 2:23 AM, Anderson Sampaio Mello via samba wrote: > Hello Samba Team, how are you? > > I'm joining linux clients in the company's environment and I would like to > apply GPOs to linux clients, I'm in the testing phase. > > I'm testing with ubuntu clients version 22.04 and the software I used to > join the samba AD was sssd. > > The 22.04 ubuntu

On 14/04/2023 15:51, Anderson Sampaio Mello via samba wrote: > Thanks everyone for the reply. > > But actually the samba documentation: > > https://wiki.samba.org/index.php/Group_Policy#SSSD > > and from David Mulder(dmulder): > > https://dmulder.github.io/group-policy-book/policy-refresh.html#sssd-refresh > > It makes it clear that sssd does support samba AD

On 14/04/2023 09:23, Anderson Sampaio Mello via samba wrote: > Hello Samba Team, how are you? > > I'm joining linux clients in the company's environment and I would like to > apply GPOs to linux clients, I'm in the testing phase. > > I'm testing with ubuntu clients version 22.04 and the software I used to > join the samba AD was sssd. > Samba does not

On 4/14/23 2:23 AM, Anderson Sampaio Mello via samba wrote: > Hello Samba Team, how are you? > > I'm joining linux clients in the company's environment and I would like to > apply GPOs to linux clients, I'm in the testing phase. > > I'm testing with ubuntu clients version 22.04 and the software I used to > join the samba AD was sssd. > > The 22.04 ubuntu

Hi again, Looking at setting group policy for Linux desktops's chrome installs. Reading through the group policy book (https://dmulder.github.io/group-policy-book/chrome.html#server-side-extension-10) it says I should have some RSOP's for chrome when I've set a policy except Im not seeing these set. I have a policy that is supposed to be setting the home url under

On 17/04/2023 15:47, David Mulder via samba wrote: > On 4/14/23 2:23 AM, Anderson Sampaio Mello via samba wrote: >> Hello Samba Team, how are you? >> >> I'm joining linux clients in the company's environment and I would >> like to >> apply GPOs to linux clients, I'm in the testing phase. >> >> I'm testing with ubuntu clients version

On 1/6/23 8:11 AM, Dawson Greeley via samba wrote: > Hi, Im attempting to apply a few group policy settings but they dont seem to be applying on the machine in question, or some settings I cannot see in the GPME. > > > 1. Settings applied to openssh dont seem to create the required config files in /etc/ssh/sshd_config.d/ for ssh to actually pick up on these changes. Is there a

Hello. Is there a way to start Gpo startup scripts using logged user? i can see that startup scripts working from root, yes there is option run_as (which somehow dont work) but this is not what i need, i dont want to create GPO for every user. i need gpo that will start script from user that just logged it, not root.

On 18/04/2023 18:15, David Mulder via samba wrote: > I was able to get it to work by setting up a simple smb.conf, and doing > a `net ads join`. SSSD is still the auth provider. > > My simple smb.conf looks like this: > > dmulder at dmm-tw:~> cat /etc/samba/smb.conf > [global] > ?? ?idmap config * : backend = tdb > ?? ?idmap config * : range = 10000-20000 >

I've made some minor changes to the join document for Azure AD. Specifically, there was a major mistake in the TransportKey definition. If you're working on a join implementation, make sure you pay close attention to the changes. Azure accepts just about any blob in the TransportKey field, and doesn't perform any validation on it. This only becomes obvious when future responses

I have been testing a Debian 11 (i386) server with samba 2:4.13.13+dfsg-1~deb11u5 running as an Active Directory Controller. This is a stand-alone DC, meant for user authentication for a small business network. I use RSAT Features on Windows 11 Pro to manage Users, Groups, Machines etc., which works fine. I would like create a new GPO using the RSAT Group Policy Manager to change Security

Hi all, I run cmd: samba-tool gpo manage scripts startup add \ {31B2F340-016D-11D2-945F-00C04FB984F9} \ /var/lib/samba/sysvol/fartest.local/scripts/startup.bat with result: [cut] ERROR: The authenticated user does not have sufficient privileges ? File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line 3230, in run ??? create_directory_hier(conn, vgp_dir) ? File

Hi! I had a samba 4.10.8 (DC1) AD DC which was holding all the FSMO roles and a samba 4.18.9 (DC2) AD DC with one way sysvol replication using rsync from DC1 to DC2. Since I'm trying to get the admx files for group policy editor into de DC I succesfully transfered the FSMO roles from DC1 to DC2 with "samba-tool fsmo transfer role=all -U SAMDOM\\Administrator" which I can confirm

On 6/28/24 10:07 PM, christian baltini via samba wrote: > Hello all, > > I am looking to rewrite the shell script here (https://wiki.samba.org/index.php/Configure_DHCP_to_update_DNS_records) in Python. > > Is anyone aware of any resources (docs, existing code, etc.) that may be useful in doing so? I?m not finding any introductory docs or simple code examples that show things like

Hi, Im attempting to apply a few group policy settings but they dont seem to be applying on the machine in question, or some settings I cannot see in the GPME. 1. Settings applied to openssh dont seem to create the required config files in /etc/ssh/sshd_config.d/ for ssh to actually pick up on these changes. Is there a different location its applying these to that I can verify with? Below is

On Thu, 18 Apr 2024 10:05:39 -0600 David Mulder via samba <samba at lists.samba.org> wrote: > > On 4/18/24 8:07 AM, Rowland Penny via samba wrote: > > OK, After reading the commands help, I created a simple script and > > ran the command like this: > > > > adminuser at tmpdc1:~ $ sudo samba-tool gpo manage scripts startup add > >

On 13/03/2023 17:05, David Mulder via samba wrote: > > On 3/13/23 10:54 AM, Rowland Penny via samba wrote: >> Glad it isn't just myself having problems understanding that code, it >> is horrible :-D >> >> If it is a machine, why is it trying to look up a uid ? I traced where >> the error message is coming from, but couldn't understand what was

On 13/03/2023 17:19, David Mulder via samba wrote: > > On 3/13/23 11:14 AM, Rowland Penny via samba wrote: >> I was referring to: >> add_local_groups: SID S-1-5-21-2112549936-2540803609-4198596461-1600 >> -> getpwuid(3000148) failed, is nsswitch configured? >> >> Which is coming from source3/auth/token_util.c >> > That's not part of the

On 10/03/2023 15:58, David Mulder via samba wrote: > > On 3/10/23 8:56 AM, Rowland Penny via samba wrote: >> >> >> On 10/03/2023 15:46, David Mulder via samba wrote: >>> On 3/10/23 8:35 AM, Dennis Binkhorst via samba wrote: >>>> I have been testing a Debian 11 (i386) server with samba >>>> 2:4.13.13+dfsg-1~deb11u5 running as an Active