These patches add Group Policy support for client machines. Adds a
winbind event that calls samba_gpoupdate to apply local machine
policies. Adds the option "apply group policies" to smb.conf, which
determines whether group policy will be applied to the client.
To start off, we only have Environment Variable policies.
This version fixes an issue in the gp_file_append class, which
caused multiple file writes using the same object to fail. The
bug caused tattooing and artifacts in the file, etc. Testing for
these fixes is found in the user policy patches (user policy
patches to follow).
docs-xml/smbdotconf/domain/gpoupdatecommand.xml | 11 +-
docs-xml/smbdotconf/winbind/applygrouppolicies.xml | 19 +++
lib/param/loadparm.c | 1 +
python/samba/gp_env_var_ext.py | 111 ++++++++++++++++++
python/samba/gp_file_append.py | 102 ++++++++++++++++
python/samba/gpclass.py | 174 ++++++++++++++-------------
selftest/target/Samba4.pm | 2 +-
source3/param/loadparm.c | 2 +
source3/winbindd/winbindd.c | 2 +
source3/winbindd/winbindd_gpupdate.c | 116 ++++++++++++++++++
source3/winbindd/winbindd_proto.h | 3 +
source3/winbindd/wscript_build | 3 +-
source4/dsdb/gpo/gpo_update.c | 193 ------------------------------
source4/dsdb/wscript_build | 9 --
source4/scripting/bin/samba_gpoupdate | 52 +++++++--
source4/scripting/bin/wscript_build | 2 +-
source4/scripting/wscript_build | 7 +-
source4/torture/gpo/apply.c | 291 ++++++++++++++++++++++++++++++++++++++--------
18 files changed, 752 insertions(+), 348 deletions(-)
--
David Mulder
SUSE Labs Software Engineer - Samba
[hidden email]
SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg)
Locked
machine_policy.mbox.txt (75K)