Bug 33753
| Summary: | How to modify GPO ACL's (security filter in the GPMC) in an ucs@school scenario without samba4 on the UCS master? | ||
|---|---|---|---|
| Product: | UCS@school | Reporter: | Felix Botner <botner> |
| Component: | Samba 4 | Assignee: | Samba maintainers <samba-maintainers> |
| Status: | RESOLVED DUPLICATE | QA Contact: | |
| Severity: | normal | ||
| Priority: | P5 | CC: | requate |
| Version: | unspecified | ||
| Target Milestone: | --- | ||
| Hardware: | Other | ||
| OS: | Linux | ||
| What kind of report is it?: | --- | What type of bug is this?: | --- |
| Who will be affected by this bug?: | --- | How will those affected feel about the bug?: | --- |
| User Pain: | Enterprise Customer affected?: | ||
| School Customer affected?: | ISV affected?: | ||
| Waiting Support: | Flags outvoted (downgraded) after PO Review: | ||
| Ticket number: | Bug group (optional): | ||
| Max CVSS v3 score: | |||
UCS@School env with UCS master and school slave, NO samba4 on the master and a window client (joined into the slave's samba4 domain) Now i want to change the security filter for a gpo via the GPMC. I added a user -> getfacl sysvol/fff.ggg/Policies/\{8B4EB339-A049-4C4B-BC35-DB7BF13D2D5E\}/GPT.INI ... user:sch1:r-x ... After five minutes my changes are overwritten. The problem is that in an ucs@school env the sysvol/sync parent is always the ucs master and the slaves resync the master's sysvol directory to the local sysvol and overwrite the locally changed ACL's with the unmodified ACL's from the master. So, how do i change GPO ACL's in this scenario (without samba4 on the master)?