[PATCHES v4] GPO support for client machine policy

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

[PATCHES v4] GPO support for client machine policy

Samba - samba-technical mailing list
These patches add Group Policy support for client machines. Adds a
winbind event that calls samba_gpoupdate to apply local machine
policies. Adds the option "apply group policies" to smb.conf, which
determines whether group policy will be applied to the client.
To start off, we only have Environment Variable policies.

This version fixes an issue in the gp_file_append class, which
caused multiple file writes using the same object to fail. The
bug caused tattooing and artifacts in the file, etc. Testing for
these fixes is found in the user policy patches (user policy
patches to follow).

 docs-xml/smbdotconf/domain/gpoupdatecommand.xml    |  11 +-
 docs-xml/smbdotconf/winbind/applygrouppolicies.xml |  19 +++
 lib/param/loadparm.c                               |   1 +
 python/samba/gp_env_var_ext.py                     | 111 ++++++++++++++++++
 python/samba/gp_file_append.py                     | 102 ++++++++++++++++
 python/samba/gpclass.py                            | 174 ++++++++++++++-------------
 selftest/target/Samba4.pm                          |   2 +-
 source3/param/loadparm.c                           |   2 +
 source3/winbindd/winbindd.c                        |   2 +
 source3/winbindd/winbindd_gpupdate.c               | 116 ++++++++++++++++++
 source3/winbindd/winbindd_proto.h                  |   3 +
 source3/winbindd/wscript_build                     |   3 +-
 source4/dsdb/gpo/gpo_update.c                      | 193 ------------------------------
 source4/dsdb/wscript_build                         |   9 --
 source4/scripting/bin/samba_gpoupdate              |  52 +++++++--
 source4/scripting/bin/wscript_build                |   2 +-
 source4/scripting/wscript_build                    |   7 +-
 source4/torture/gpo/apply.c                        | 291 ++++++++++++++++++++++++++++++++++++++--------
 18 files changed, 752 insertions(+), 348 deletions(-)

--
David Mulder
SUSE Labs Software Engineer - Samba
[hidden email]
SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg)


machine_policy.mbox.txt (75K) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: [PATCHES v4] GPO support for client machine policy

Samba - samba-technical mailing list
ping


On 12/22/2017 12:11 PM, David Mulder via samba-technical wrote:

> These patches add Group Policy support for client machines. Adds a
> winbind event that calls samba_gpoupdate to apply local machine
> policies. Adds the option "apply group policies" to smb.conf, which
> determines whether group policy will be applied to the client.
> To start off, we only have Environment Variable policies.
>
> This version fixes an issue in the gp_file_append class, which
> caused multiple file writes using the same object to fail. The
> bug caused tattooing and artifacts in the file, etc. Testing for
> these fixes is found in the user policy patches (user policy
> patches to follow).
>
>  docs-xml/smbdotconf/domain/gpoupdatecommand.xml    |  11 +-
>  docs-xml/smbdotconf/winbind/applygrouppolicies.xml |  19 +++
>  lib/param/loadparm.c                               |   1 +
>  python/samba/gp_env_var_ext.py                     | 111 ++++++++++++++++++
>  python/samba/gp_file_append.py                     | 102 ++++++++++++++++
>  python/samba/gpclass.py                            | 174 ++++++++++++++-------------
>  selftest/target/Samba4.pm                          |   2 +-
>  source3/param/loadparm.c                           |   2 +
>  source3/winbindd/winbindd.c                        |   2 +
>  source3/winbindd/winbindd_gpupdate.c               | 116 ++++++++++++++++++
>  source3/winbindd/winbindd_proto.h                  |   3 +
>  source3/winbindd/wscript_build                     |   3 +-
>  source4/dsdb/gpo/gpo_update.c                      | 193 ------------------------------
>  source4/dsdb/wscript_build                         |   9 --
>  source4/scripting/bin/samba_gpoupdate              |  52 +++++++--
>  source4/scripting/bin/wscript_build                |   2 +-
>  source4/scripting/wscript_build                    |   7 +-
>  source4/torture/gpo/apply.c                        | 291 ++++++++++++++++++++++++++++++++++++++--------
>  18 files changed, 752 insertions(+), 348 deletions(-)
>

--
David Mulder
SUSE Labs Software Engineer - Samba
[hidden email]
SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg)