[PATCHES] GPO support for client machine policy
David Mulder
dmulder at suse.com
Sat Dec 2 15:54:56 UTC 2017
These patches add Group Policy support for client machines. Adds a
winbind event that calls samba_gpoupdate to apply local machine
policies. Adds the option "winbind gpupdate" to smb.conf, which
determines whether group policy will be applied to the client. This is
*disabled* by default for now. Users will need to manually enable this
to see the new functionality.
To start off, we only have Environment Variable policies.
auth/credentials/pycredentials.c | 14 +++++
docs-xml/smbdotconf/domain/gpoupdatecommand.xml | 11 ++--
docs-xml/smbdotconf/winbind/winbindgpupdate.xml | 18 ++++++
lib/param/loadparm.c | 1 +
python/samba/gp_env_var_ext.py | 86
++++++++++++++++++++++++++
python/samba/gp_file_append.py | 86
++++++++++++++++++++++++++
python/samba/gpclass.py | 163
+++++++++++++++++++++++++------------------------
source3/param/loadparm.c | 2 +
source3/winbindd/winbindd.c | 2 +
source3/winbindd/winbindd_gpupdate.c | 116
+++++++++++++++++++++++++++++++++++
source3/winbindd/winbindd_proto.h | 3 +
source3/winbindd/wscript_build | 3 +-
source4/scripting/bin/samba_gpoupdate | 49 ++++++++++++---
source4/scripting/bin/wscript_build | 2 +-
source4/scripting/wscript_build | 7 ++-
15 files changed, 465 insertions(+), 98 deletions(-)
--
David Mulder
SUSE Labs Software Engineer - Samba
dmulder at suse.com
SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: machine_policies.mbox
Type: application/mbox
Size: 31709 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20171202/39b4c3c5/machine_policies.mbox>
More information about the samba-technical
mailing list