[Samba] gpo not working

Ing. Jorge E. Rojas jorgee at vcl.cu
Sat Nov 16 13:24:05 MST 2013


Hello people:

First, excuse any misspelling, english is not my mother tongue


I'm  triying a simple gpo, (group policy object), put a fixed image as 
wallpaper on all the pc after sucessfully connected to the dc but is not 
working.

Using the remote administration tool had has defined an Organizational
Unit with one user and defined a policy with two restrictions
1) use a shared image  [ \\dc\common\backgroud.jpg ]  as wallpaper
2) disable change of wallpaper by the user

the same restrictions are applied in the default domain policy


BUT IS NOT WORKING

Login with a user inside the default Users group or a user from the OU
created is the same, wallpaper goes with the XP default and not the 
image i put on \\dc\common\backgroud.jpg

the test is done with a phisical pc as domain member and the server 
running over a virtual machine  with debian wheezy (proxmox container)

some data for have an idea on scene

#samba -V
Version 4.2.0pre1-GIT-UNKNOWN

#uname -a
Linux dc 2.6.32-20-pve #1 SMP Wed May 15 08:23:27 CEST 2013 i686 GNU/Linux


#samba-tool gpo listall
GPO          : {31B2F340-016D-11D2-945F-00C04FB984F9}
display name : Default Domain Policy
path         :
\\shop.zone.example.com\sysvol\shop.zone.example.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}
dn           :
CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=shop,DC=zone,DC=example,DC=com
version      : 0
flags        : NONE

GPO          : {6AC1786C-016F-11D2-945F-00C04FB984F9}
display name : Default Domain Controllers Policy
path         :
\\shop.zone.example.com\sysvol\shop.zone.example.com\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}
dn           :
CN={6AC1786C-016F-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=shop,DC=zone,DC=example,DC=com
version      : 0
flags        : NONE

GPO          : {000D1FEE-0CFF-4ADA-9D53-0E1434A9AC60}
display name : shop01
path         :
\\shop.zone.example.com\SysVol\shop.zone.example.com\Policies\{000D1FEE-0CFF-4ADA-9D53-0E1434A9AC60}
dn           :
CN={000D1FEE-0CFF-4ADA-9D53-0E1434A9AC60},CN=Policies,CN=System,DC=shop,DC=zone,DC=example,DC=com
version      : 131072
flags        : NONE

GPO          : {6C4CE70E-7FCA-4183-B11F-C5971EEBD4CC}
display name : infor1
path         :
\\shop.zone.example.com\SysVol\shop.zone.example.com\Policies\{6C4CE70E-7FCA-4183-B11F-C5971EEBD4CC}
dn           :
CN={6C4CE70E-7FCA-4183-B11F-C5971EEBD4CC},CN=Policies,CN=System,DC=shop,DC=zone,DC=example,DC=com
version      : 65536
flags        : NONE


besides there is a strange error with aclcheck

# samba-tool gpo aclcheck
ERROR(<type 'exceptions.KeyError'>): uncaught exception - 'No such element'
   File
"/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py",
line 175, in _run
     return self.run(*args, **kwargs)
   File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/gpo.py",
line 1150, in run
     ds_sd_ndr = m['nTSecurityDescriptor'][0]




More information about the samba mailing list