[PATCHES] GPO support for client machine policy

David Mulder dmulder at suse.com
Sat Dec 2 15:54:56 UTC 2017


These patches add Group Policy support for client machines. Adds a
winbind event that calls samba_gpoupdate to apply local machine
policies. Adds the option "winbind gpupdate" to smb.conf, which
determines whether group policy will be applied to the client. This is
*disabled* by default for now. Users will need to manually enable this
to see the new functionality.
To start off, we only have Environment Variable policies.

 auth/credentials/pycredentials.c                |  14 +++++
 docs-xml/smbdotconf/domain/gpoupdatecommand.xml |  11 ++--
 docs-xml/smbdotconf/winbind/winbindgpupdate.xml |  18 ++++++
 lib/param/loadparm.c                            |   1 +
 python/samba/gp_env_var_ext.py                  |  86
++++++++++++++++++++++++++
 python/samba/gp_file_append.py                  |  86
++++++++++++++++++++++++++
 python/samba/gpclass.py                         | 163
+++++++++++++++++++++++++------------------------
 source3/param/loadparm.c                        |   2 +
 source3/winbindd/winbindd.c                     |   2 +
 source3/winbindd/winbindd_gpupdate.c            | 116
+++++++++++++++++++++++++++++++++++
 source3/winbindd/winbindd_proto.h               |   3 +
 source3/winbindd/wscript_build                  |   3 +-
 source4/scripting/bin/samba_gpoupdate           |  49 ++++++++++++---
 source4/scripting/bin/wscript_build             |   2 +-
 source4/scripting/wscript_build                 |   7 ++-
 15 files changed, 465 insertions(+), 98 deletions(-)

-- 
David Mulder
SUSE Labs Software Engineer - Samba
dmulder at suse.com
SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: machine_policies.mbox
Type: application/mbox
Size: 31709 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20171202/39b4c3c5/machine_policies.mbox>


More information about the samba-technical mailing list