mirror of
https://github.com/samba-team/samba.git
synced 2025-07-20 08:59:06 +03:00
gpo: Implement process_group_policy() gp_ext func
MS spec describes the policy callback as a function called ProcessGroupPolicy which accepts a pDeletedGPOList and a pChangedGPOList param. The Group Policy Client Side Extension then iterates over the deleted, then the changed gpo lists and applies/unapplies policy. We should do this also. Signed-off-by: David Mulder <dmulder@suse.com> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Aurelien Aptel <aaptel@suse.com>
This commit is contained in:
committed by
Aurélien Aptel
parent
fb22582aef
commit
7bb326a60d
@ -166,3 +166,14 @@ class gp_sec_ext(gp_inf_ext):
|
||||
}
|
||||
}
|
||||
|
||||
def process_group_policy(self, deleted_gpo_list, changed_gpo_list):
|
||||
if self.lp.get('server role') != 'active directory domain controller':
|
||||
return
|
||||
inf_file = 'MACHINE/Microsoft/Windows NT/SecEdit/GptTmpl.inf'
|
||||
|
||||
for gpo in changed_gpo_list:
|
||||
if gpo.file_sys_path:
|
||||
self.gp_db.set_guid(gpo.name)
|
||||
path = os.path.join(gpo.file_sys_path, inf_file)
|
||||
self.parse(path)
|
||||
|
||||
|
Reference in New Issue
Block a user