[Samba] using Linux GPO

[Stefan Kania]

Hello,

I'm setting up Linux-GPOs starting with motd. Testing with "samba-tool
gpo list fs01" (fs01 is my linux-host). I see:
------------
root at addc01:/home/stka# samba-tool gpo list fs01
GPOs for user fs01
    Linux-motd {A11688A4-97D2-4471-9EBC-C0A40F169339}
    Default Domain Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
------------

I reseted the permissions with "samba-tool ntacl sysvolreset" everything
is fine.

I added the line "apply group policies = yes" to the smb.conf.

Restarted winbind (I also tried a reboot)

When I do a "samba-gpupdate --force" or "samba-gpupdate --rsop" I'm
always getting the following error-message:
-----------
root at fs01:/home/stka# samba-gpupdate --force
Traceback (most recent call last):
  File "/usr/sbin/samba-gpupdate", line 119, in <module>
    apply_gp(lp, creds, logger, store, gp_extensions, opts.force)
  File "/usr/lib/python3/dist-packages/samba/gpclass.py", line 437, in
apply_gp
    dc_hostname = get_dc_hostname(creds, lp)
  File "/usr/lib/python3/dist-packages/samba/gpclass.py", line 358, in
get_dc_hostname
    cldap_ret = net.finddc(domain=lp.get('realm'),
flags=(nbt.NBT_SERVER_LDAP |
samba.NTSTATUSError: (3221225524, 'The object name is not found.')

root at fs01:/home/stka# samba-gpupdate --rsop
Traceback (most recent call last):
  File "/usr/sbin/samba-gpupdate", line 117, in <module>
    rsop(lp, creds, logger, store, gp_extensions, opts.target)
  File "/usr/lib/python3/dist-packages/samba/gpclass.py", line 511, in rsop
    dc_hostname = get_dc_hostname(creds, lp)
  File "/usr/lib/python3/dist-packages/samba/gpclass.py", line 358, in
get_dc_hostname
    cldap_ret = net.finddc(domain=lp.get('realm'),
flags=(nbt.NBT_SERVER_LDAP |
samba.NTSTATUSError: (3221225524, 'The object name is not found.')
-----------

What did I miss?
-- 
Stefan Kania
Landweg 13
25693 St. Michaelisdonn


Signieren jeder E-Mail hilft Spam zu reduzieren und schützt Ihre
Privatsphäre. Ein kostenfreies Zertifikat erhalten Sie unter
https://www.dgn.de/dgncert/index.html