[Samba] Group policy broken

[L.P.H. van Belle]

Hai Ivan, 

Base on the example link. 

The users/computer impersonat "SYSTEM" to apply the GPO these days. 
So i think your missing SYSTEM somewhere.

I have myself on such GPO objects only "apply GPO" set on a security group. 
But in the resulting GPO, SYSTEM is shown also. 

And you could run : samba-tool ntacl sysvolreset
See if that helps also.


Greetz, 

Louis







> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Ivan 
> Juriši?? via samba
> Verzonden: vrijdag 21 juni 2019 12:25
> Aan: samba at lists.samba.org
> Onderwerp: [Samba] Group policy broken
> 
> Hello,
> 
> I using Samba 4.10.4-Debian and Samba work as Active 
> Directory. All work
> ok, until I try apply GPO to specific security group with 
> guide on link
> http://www.rebeladmin.com/2018/04/group-policy-security-filtering/ .
> After modify GPO I got error:
> 
> root at dc1:~# samba-tool gpo list user5
> 
> ERROR(runtime): uncaught exception - Badly formed gPLink ' '
>   File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line
> 185, in _run
>     return self.run(*args, **kwargs)
>   File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line 519,
> in run
>     glist = parse_gplink(str(msg['gPLink'][0]))
>   File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line 102,
> in parse_gplink
>     raise RuntimeError("Badly formed gPLink '%s'" % g)
> 
> How to fix GPO ?
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>