[Samba] [SOLVED] Re: Problem switching to BIND9_DLZ

Achim Gottinger achim at ag-web.biz
Fri Nov 13 12:45:17 UTC 2015



Am 13.11.2015 um 11:30 schrieb Rowland Penny:
> On 13/11/15 10:20, mourik jan heupink wrote:
>> Hi Rowland, Achim, list,
>>
>>> The search would probably be better something like this:
>>>
>>> res7 =
>>> samdb.search(expression="(name={31B2F340-016D-11D2-945F-00C04FB984F9})", 
>>>
>>>                          base="CN=Policies,CN=System," + basedn,
>>>                          scope=ldb.SCOPE_ONELEVEL,
>>> attrs=["cn","displayName"])
>>>      names.policyid = 
>>> str(res7[0]["cn"]).replace("{","").replace("}","")
>>>
>>> which is the same as:
>>>
>>> ldbsearch -H /usr/local/samba/private/sam.ldb -b
>>> "cn=Policies,cn=System,dc=samdom,dc=example,dc=com" -s one
>>> '(name={31B2F340-016D-11D2-945F-00C04FB984F9})' cn displayName
>>>
>>> which returns:
>>>
>>> # record 1
>>> dn:
>>> CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=samdom,DC=example,DC=com 
>>>
>>>
>>> cn: {31B2F340-016D-11D2-945F-00C04FB984F9}
>>> displayName: Default Domain Policy
>>>
>>> Rowland
>>
>> Yes, that is much better, and also is similar to the way windows 
>> searches for these policies:
>>
>> https://support.microsoft.com/en-us/kb/556025
>>
>> MJ
>>
>
> If Achim opens a bug report on this, I will propose a patch to fix it.
>
> Rowland
>
>

Hello Rowland,

Searching for the ID as proposed you would fix the issue. The code 
usually is used during domain provision so the gpo was just created.

Here is the bug report https://bugzilla.samba.org/show_bug.cgi?id=11600

Achim




More information about the samba mailing list