[Samba] gpo client linux sssd does not apply

Rowland Penny rpenny at samba.org
Fri Apr 14 15:18:20 UTC 2023

On 14/04/2023 15:51, Anderson Sampaio Mello via samba wrote:
> Thanks everyone for the reply.
> But actually the samba documentation:
> https://wiki.samba.org/index.php/Group_Policy#SSSD
> and from David Mulder(dmulder):
> https://dmulder.github.io/group-policy-book/policy-refresh.html#sssd-refresh
> It makes it clear that sssd does support samba AD GPOs and to work it needs
> oddjob-gpupdate and samba-gpupdate (command installed with samba).
> As I don't know the cause of the problem, if I compiled the code the wrong
> way or not I decided to ask.
> Hopefully someone like David Mulder or someone else can help me.
> Thank you all.

Reading the relevant portions of the policy-refresh.html, it appears 
that you should either allow winbind to apply the GPO's or sssd, not both.

If you are using sssd to apply the GPO's, then you are asking in the 
wrong place, you should be asking on the sssd-users mailing list. Samba 
does not produce sssd, so, unless someone is using it and knows the 
pitfalls & fixes, you will be better asking on the correct list.


More information about the samba mailing list