[Samba] Domain password policy with Samba AD DC

[David Mulder]

On 8/30/23 8:21 AM, Rowland Penny via samba wrote:
>
> If I change the output of 'gpo_version' from gpclass.py to return an
> integer, samba-gpupdate no longer crashes, it still doesn't work, but
> it no longer crashes.

It occurs to me there was actually a bug in the `samba-tool gpo manage 
security set` command that failed to initialize the gpo version. This 
was bug https://bugzilla.samba.org/show_bug.cgi?id=15327 which was fixed 
in March. Perhaps this is at least the initial issue we're encountering? 
Although, using the GPME to set these policies would have avoided that 
problem.

Something to keep in mind, it's good practice to use the latest stable 
version of samba-tool (perhaps from a different machine) to modify the 
SYSVOL using the `samba-tool gpo manage` command, not necessarily the 
stable version released by your distro.

-- 
David Mulder
Labs Software Engineer, Samba
SUSE
1221 S Valley Grove Way, Suite 500
Pleasant Grove, UT 84062
(P)+1 385.208.2989
dmulder at suse.com
http://www.suse.com