[Samba] Group policy broken

L.P.H. van Belle belle at bazuin.nl
Wed Jun 26 08:07:20 UTC 2019


No, a wipe is not needed. 

Do you know which GPO it is? You can remove/move the conflicting one. 

Your problem might be one of these, have a look at these bugreports. 

https://bugzilla.samba.org/show_bug.cgi?id=13564 
https://bugzilla.samba.org/show_bug.cgi?id=13993 

Try to find the conflicting one. 

And make sure you have a backup of the sysvol. 

Greetz, 

Louis




> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Ivan 
> Juriši?? via samba
> Verzonden: woensdag 26 juni 2019 9:19
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Group policy broken
> 
> Hi Louis,
> 
> I try with "samba-tool ntacl sysvolreset" but still have error
> "ERROR(runtime): uncaught exception - Badly formed gPLink".
> 
> Only options is wipe server and start from stratch?
> 
> On 21. 06. 2019. 13:14, L.P.H. van Belle via samba wrote:
> > Hai Ivan, 
> >
> > Base on the example link. 
> >
> > The users/computer impersonat "SYSTEM" to apply the GPO these days. 
> > So i think your missing SYSTEM somewhere.
> >
> > I have myself on such GPO objects only "apply GPO" set on a 
> security group. 
> > But in the resulting GPO, SYSTEM is shown also. 
> >
> > And you could run : samba-tool ntacl sysvolreset
> > See if that helps also.
> >
> >
> > Greetz, 
> >
> > Louis
> >
> >
> >
> >
> >
> >
> >
> >> -----Oorspronkelijk bericht-----
> >> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Ivan 
> >> Juriši?? via samba
> >> Verzonden: vrijdag 21 juni 2019 12:25
> >> Aan: samba at lists.samba.org
> >> Onderwerp: [Samba] Group policy broken
> >>
> >> Hello,
> >>
> >> I using Samba 4.10.4-Debian and Samba work as Active 
> >> Directory. All work
> >> ok, until I try apply GPO to specific security group with 
> >> guide on link
> >> 
> http://www.rebeladmin.com/2018/04/group-policy-security-filtering/ .
> >> After modify GPO I got error:
> >>
> >> root at dc1:~# samba-tool gpo list user5
> >>
> >> ERROR(runtime): uncaught exception - Badly formed gPLink ' '
> >>   File 
> "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line
> >> 185, in _run
> >>     return self.run(*args, **kwargs)
> >>   File 
> "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line 519,
> >> in run
> >>     glist = parse_gplink(str(msg['gPLink'][0]))
> >>   File 
> "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line 102,
> >> in parse_gplink
> >>     raise RuntimeError("Badly formed gPLink '%s'" % g)
> >>
> >> How to fix GPO ?
> >>
> >>
> >> -- 
> >> To unsubscribe from this list go to the following URL and read the
> >> instructions:  https://lists.samba.org/mailman/options/samba
> >>
> >>
> >
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
> 




More information about the samba mailing list