Samba4-group policy stuff

[Andrew Bartlett]

On Thu, 2008-02-07 at 23:14 +0000, Huang, Peter (GT/PGS-Palo Alto)
wrote:
> I understand that group policy under samba4 is still in the early stage but so far I'm quite impressed by capability of samba4.   I was doing group policy with computer and when I get to  "ip security policy management", this is what I got trying to save the ipsec policy.
> 
> The following error occurred when saving IP security data:
> The Server is unwilling to process the request. (80072035)
> 
> It seems to be a LDAP/schema issue.  Is there any workaround on this
> one (by importing a ldif file)?  I'm also curious in the technical
> details here, so any inside on this is appreciated.

Can you try and get some more logs from Samba, and a wireshark trace?

Quite possibly we just need to extend the subset of the AD schema that
we support - a simple change to testprogs/ejs/minschema.txt (and then
re-running that against an AD server) I think.

Andrew Bartlett

-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20080208/b288adf3/attachment.bin