[PATCHES] Make gpo extensible

[David Mulder]

ping, any thoughts? I'd like to have this functionality in master to
demonstrate at SambaXP.

On 02/21/2018 11:46 AM, David Mulder wrote:
> Latest patches remove the "kdc" group policy, which are really just
> machine policies. Now the gpo checks the server role itself.
>
>  buildtools/wafsamba/wafsamba.py       |   8 +-
>  python/gp_exts/__init__.py            |  35 ++++++++
>  python/gp_exts/gp_example_ex.py       | 113 ++++++++++++++++++++++++++
>  python/gp_exts/machine/__init__.py    |   4 +
>  python/gp_exts/machine/gp_sec_ext.py  | 148
> ++++++++++++++++++++++++++++++++++
>  python/samba/gpclass.py               | 205
> ++++++++++-------------------------------------
>  python/wscript                        |   6 ++
>  source4/scripting/bin/samba_gpoupdate |  21 ++++-
>  source4/torture/gpo/apply.c           | 258
> ++++++++++++++++++++++++++++++++++++++++++++++++-----------
>  9 files changed, 585 insertions(+), 213 deletions(-)
>
> On 02/20/2018 01:25 PM, David Mulder via samba-technical wrote:
>> On 02/20/2018 12:38 PM, Stefan Metzmacher wrote:
>>> Hi David,
>>> I haven't looked at the patches itself, but I'm
>>> wondering about the naming and separation.
>>>
>>> As far as I understand there only machine and user gpo's under windows.
>> Good point. The 'kdc' policies are really just machine policies that
>> only apply to the kdc.
>>> Shouldn't the extension itself check the server role it is running on
>>> in order to find out if it needs to apply some settings?
>> I agree (more patches to follow).
>>> metze
>>>

-- 
David Mulder
SUSE Labs Software Engineer - Samba
dmulder at suse.com
SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg)