GPO created via samba-tool don't Copy or Backup

[Klaas TJEBBES]

Hi,

It looks like I don't get very popular with my question here. But could 
at least someone test this to tell me if one can reproduce ?

* In RSAT create a new GPO and make a modification in it (I did : 
Computer Configuration -> Administrative Templates -> System -> Logon 
“Always Wait for the Network at Computer Startup and Logon” to “Enabled”)
* Close RSAT
* Backup GPO via samba-tool (in /tmp/...)
* Restore GPO via samba-tool (from /tmp/...) with another name
* In RSAT try to Copy this new GPO (right clic "Copy", right clic on 
"Group Policy Objects" and Paste)

I get "Invalid directory". Even doing it via powershell and debug and 
traces, hundreds of log lines, I couldn't figure out why it won't copy...


Regards,
  Klaas


Le 30/04/2021 à 16:04, Klaas TJEBBES via samba-technical a écrit :
> I'm sorry, I completly forgot to mention this :
> 
> root at dc1:~# dpkg -l |grep samba
> ii  python3-samba                        2:4.11.6+dfsg-0ubuntu1.6    
> amd64        Python 3 bindings for Samba
> ii  samba                                2:4.11.6+dfsg-0ubuntu1.6    
> amd64        SMB/CIFS file, print, and login server for Unix
> ii  samba-common                         2:4.11.6+dfsg-0ubuntu1.6    
> all          common files used by both the Samba server and client
> ii  samba-common-bin                     2:4.11.6+dfsg-0ubuntu1.6    
> amd64        Samba common files used by both the server and the client
> ii  samba-dsdb-modules:amd64             2:4.11.6+dfsg-0ubuntu1.6    
> amd64        Samba Directory Services Database
> ii  samba-libs:amd64                     2:4.11.6+dfsg-0ubuntu1.6    
> amd64        Samba core libraries
> ii  samba-vfs-modules:amd64              2:4.11.6+dfsg-0ubuntu1.6    
> amd64        Samba Virtual FileSystem plugins
> 
> root at dc1:~# cat /etc/lsb-release
> DISTRIB_ID=Ubuntu
> DISTRIB_RELEASE=20.04
> DISTRIB_CODENAME=focal
> DISTRIB_DESCRIPTION="Ubuntu 20.04.2 LTS"
> 
> And Windows 10.20H2.
> 
> 
> Le 30/04/2021 à 15:03, Klaas TJEBBES via samba-technical a écrit :
>> Hello.
>>
>> I am facing a problem with GPO managing on the Samba side.
>>
>> When I create a GPO named "test" using the RSAT on Windows, I can then 
>> Copy and Backup this GPO.
>>
>> On the samba server, using "samba-tool gpo backup/restore", I backup 
>> and restore this "test" GPO under another name, "blabla" for example.
>>
>> Back in the RSAT on Windows, this new "blabla" GPO can NOT be Copied 
>> or Backuped. The error is "invalid directory".
>>
>> I CLOSE THE RSAT.
>>
>> On the samba server, I go in the "test" GPO directory (in 
>> "/home/sysvol/domseth.ac-test.fr/Policies/{ID_TEST_GPO}") and do :
>>   getfattr -d -n user.DOSATTRIB -R . > ../test.attrs
>>
>> Then I go in the directory of the "blabla" GPO and do :
>>    setfattr --restore=../test.attrs
>>
>> Then I return on the RSAT and now I can successful Copy and Backup 
>> "blabla" GPO.
>>
>> Why this problem ? Am I doing something wrong ?
>>
>>
>> Thank you, regards,
>>   Klaas
>>
> 

-- 
~~~~~~~~~~~~~~~~~~~~~~~

- Klaas TJEBBES
- Equipe EOLE
- DSI
- Dijon

~~~~~~~~~~~~~~~~~~~~~~~