[Samba] Continued Group Policy issues

Rowland Penny rpenny at samba.org
Mon Jul 16 12:22:45 UTC 2018

On Mon, 16 Jul 2018 17:37:21 +0530
Anantha Raghava via samba <samba at lists.samba.org> wrote:

> Hi,
> Thanks for clarification.
> However, we held back from implementing your suggestion and observed 
> that after about 40 odd hours from the initial publishing of the 
> policies, all clients connecting to any of the Domain Controllers 
> started to get the policies. No client was throwing any error while 
> applying the policies from any of the 4 Domain Controllers.

Good, but why the delay ?

> Does it mean that "idmap.ldb" is taking time to replicate
> automatically? 

'idmap.ldb' never replicates automatically, it must be done manually.

> Or is it some other issue? Nothing interesting about
> this is logged in samba. Sysvol is getting replicated as soon as any
> policy is added or modified or deleted on the first domain controller.

How is 'sysvol' being replicated, this again is a manual procedure on
Samba AD DC's

> Basically we are implementing "Software While Listing" policies and 
> these are defined as computer policies. The error started to show up 
> once the policy was linked.
> Any hints on this behavior?

No, but it might help if you post more info on your setup.


More information about the samba mailing list