[PATCHES v3] GPO support for client machine policy

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

[PATCHES v3] GPO support for client machine policy

Samba - samba-technical mailing list
These patches add Group Policy support for client machines. Adds a
winbind event that calls samba_gpoupdate to apply local machine
policies. Adds the option "apply group policies" to smb.conf, which
determines whether group policy will be applied to the client.
To start off, we only have Environment Variable policies.

Fixes in this patch version:
* changed "winbind gpupdate" smb.conf option to "apply group policies".
* Checks for windows paths in the PATH variable, and ignores them.
* Also adds testing for the windows path ignore.

 docs-xml/smbdotconf/domain/gpoupdatecommand.xml    |  11 +-
 docs-xml/smbdotconf/winbind/applygrouppolicies.xml |  19 +++
 lib/param/loadparm.c                               |   1 +
 python/samba/gp_env_var_ext.py                     | 111 +++++++++++++++++
 python/samba/gp_file_append.py                     |  97 +++++++++++++++
 python/samba/gpclass.py                            | 174 ++++++++++++++------------
 selftest/target/Samba4.pm                          |   2 +-
 source3/param/loadparm.c                           |   2 +
 source3/winbindd/winbindd.c                        |   2 +
 source3/winbindd/winbindd_gpupdate.c               | 116 ++++++++++++++++++
 source3/winbindd/winbindd_proto.h                  |   3 +
 source3/winbindd/wscript_build                     |   3 +-
 source4/dsdb/gpo/gpo_update.c                      | 193 -----------------------------
 source4/dsdb/wscript_build                         |   9 --
 source4/scripting/bin/samba_gpoupdate              |  52 ++++++--
 source4/scripting/bin/wscript_build                |   2 +-
 source4/scripting/wscript_build                    |   7 +-
 source4/torture/gpo/apply.c                        | 302 +++++++++++++++++++++++++++++++++++++++-------
 18 files changed, 758 insertions(+), 348 deletions(-)

--
David Mulder
SUSE Labs Software Engineer - Samba
[hidden email]
SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg)


machine_policy.mbox.txt (76K) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: [PATCHES v3] GPO support for client machine policy

Samba - samba-technical mailing list
And here are the patches after rebasing the unapply fix patches.

 docs-xml/smbdotconf/domain/gpoupdatecommand.xml    |  11 +-
 docs-xml/smbdotconf/winbind/applygrouppolicies.xml |  19 +++
 lib/param/loadparm.c                               |   1 +
 python/samba/gp_env_var_ext.py                     | 111 +++++++++++++++++
 python/samba/gp_file_append.py                     |  97 +++++++++++++++
 python/samba/gpclass.py                            | 174
++++++++++++++------------
 selftest/target/Samba4.pm                          |   2 +-
 source3/param/loadparm.c                           |   2 +
 source3/winbindd/winbindd.c                        |   2 +
 source3/winbindd/winbindd_gpupdate.c               | 116 ++++++++++++++++++
 source3/winbindd/winbindd_proto.h                  |   3 +
 source3/winbindd/wscript_build                     |   3 +-
 source4/dsdb/gpo/gpo_update.c                      | 193
-----------------------------
 source4/dsdb/wscript_build                         |   9 --
 source4/scripting/bin/samba_gpoupdate              |  52 ++++++--
 source4/scripting/bin/wscript_build                |   2 +-
 source4/scripting/wscript_build                    |   7 +-
 source4/torture/gpo/apply.c                        | 302
+++++++++++++++++++++++++++++++++++++++-------
 18 files changed, 758 insertions(+), 348 deletions(-)

On 12/13/2017 10:53 AM, David Mulder via samba-technical wrote:

> These patches add Group Policy support for client machines. Adds a
> winbind event that calls samba_gpoupdate to apply local machine
> policies. Adds the option "apply group policies" to smb.conf, which
> determines whether group policy will be applied to the client.
> To start off, we only have Environment Variable policies.
>
> Fixes in this patch version:
> * changed "winbind gpupdate" smb.conf option to "apply group policies".
> * Checks for windows paths in the PATH variable, and ignores them.
> * Also adds testing for the windows path ignore.
>
>  docs-xml/smbdotconf/domain/gpoupdatecommand.xml    |  11 +-
>  docs-xml/smbdotconf/winbind/applygrouppolicies.xml |  19 +++
>  lib/param/loadparm.c                               |   1 +
>  python/samba/gp_env_var_ext.py                     | 111 +++++++++++++++++
>  python/samba/gp_file_append.py                     |  97 +++++++++++++++
>  python/samba/gpclass.py                            | 174 ++++++++++++++------------
>  selftest/target/Samba4.pm                          |   2 +-
>  source3/param/loadparm.c                           |   2 +
>  source3/winbindd/winbindd.c                        |   2 +
>  source3/winbindd/winbindd_gpupdate.c               | 116 ++++++++++++++++++
>  source3/winbindd/winbindd_proto.h                  |   3 +
>  source3/winbindd/wscript_build                     |   3 +-
>  source4/dsdb/gpo/gpo_update.c                      | 193 -----------------------------
>  source4/dsdb/wscript_build                         |   9 --
>  source4/scripting/bin/samba_gpoupdate              |  52 ++++++--
>  source4/scripting/bin/wscript_build                |   2 +-
>  source4/scripting/wscript_build                    |   7 +-
>  source4/torture/gpo/apply.c                        | 302 +++++++++++++++++++++++++++++++++++++++-------
>  18 files changed, 758 insertions(+), 348 deletions(-)
>
--
David Mulder
SUSE Labs Software Engineer - Samba
[hidden email]
SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg)


machine_policy.mbox.txt (76K) Download Attachment