Testing the new Linux-GPO stuff I found out that the GPOs not working. The problem is, that samba writes the new GPO to "/var/lib/samba/sysvol/example.net/SysVol". The following workaround helps:
ln -s ../../example.net/ example.net
Then it's possible to read the GPO with "samba-gpupdate --force" on a client
This bug was referenced in samba master:
Created attachment 16572 [details]
fix for 4.14, cherry-picked from master
Pushed to autobuild-v4-14-test.
This bug was referenced in samba v4-14-test:
Closing out bug report.
This bug was referenced in samba v4-14-stable (Release samba-4.14.3):