Bug 13627 - Missing gPCMachineExtensionNames attributes import GPO
Missing gPCMachineExtensionNames attributes import GPO
Status: NEW
Product: Samba 4.1 and newer
Classification: Unclassified
Component: AD: LDB/DSDB/SAMDB
4.9.0
All All
: P5 normal
: ---
Assigned To: Andrew Bartlett
Samba QA Contact
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2018-09-21 14:47 UTC by Kevin Guerineau
Modified: 2018-09-21 14:47 UTC (History)
1 user (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Kevin Guerineau 2018-09-21 14:47:29 UTC
Hi everyone,

I am going through GPO Import/Export functionnality. 

Using Samba 4.10 Git master from earlier this week

When restoring a GPO (startup script GPO), the gPCMachineExtensionNames attributes is not created on the CN={GPO_GUID},CN=Policies,CN=System. For instance it missing the following attributes and value:

gPCMachineExtensionNames: [{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B6664F-4972-11D1-A7CA-0000F87571E3}]

The GPO details does not appear in the "setting" tab of the GPO management console from RSAT, and it does not apply properly on the desktop.

Adding the above mentionned attribute make it appears in the console. 

Cheers,

Kévin and Denis


How to reproduce
================

To reproduce the bug
* create a startup script GPO using RSAT Management console
* export that startup script GPO using samba-tool gpo backup
* delete the GPO
* restore the GPO using samba-tool gpo restore

To show the difference
* do a ldbsearch dump of the GPO
* edit the buggy GPO using RSAT and just add a space somewhere in the startup script and save it.
* do a ldbsearch dump of the GPO and diff