Im useing Debian 12 on both, the client and the domaincontroller. Samba version on both is 4.21.1 from Debian backports. Creating a GPO creates /etc/motd but not /etc/issue and also the sudoers file in /etc/sudoers.d are not created. samba-gpupdate --force and then samba-gpupdate --rsop are showing the content of the GPO, for both /etc/issue and sudoers. Restarting winbind on both is not fixing the problem.
Another Problem with GPO is, thart as soon as I add one or more smb.conf parameter ALL defaultsettings are in smb.conf. Then, because the parameter 'winbind separator' is not set the smb.conf is changed to: winbind separator = winbind use default domain = Yes only one line for both parameters. The testparm is giving me: ERROR: the 'winbind separator' parameter must be a single character.
(In reply to Stefan Kania from comment #1) > Another Problem with GPO is, thart as soon as I add one or more smb.conf parameter ALL defaultsettings are in smb.conf. Then, because the parameter 'winbind separator' is not set the smb.conf is changed to: THis has been reported again in https://bugzilla.samba.org/show_bug.cgi?id=15906 I won't close either as a duplicate, as the first message in this bug looks to be describing a distinct issue, but please let's use bug 15906 for the winbind separator thing.
Would you please run `samba-gpupdate -d 10 --force` (adds debug), and share the output? Also share the output of `samba-gpupdate --rsop`, so we can see exactly which extensions aren't applying?
Created attachment 18767 [details] gpupdate --force
Created attachment 18768 [details] gpupdate --rsop
(In reply to Stefan Kania from comment #5) Your rsop command didn't run correctly. It looks like you tried to pass `--rsop` to nano?
Created attachment 18772 [details] fixed version of rspo result Sorry for the first version of the rspo result. Here is the fixed version.
Created attachment 18773 [details] final version Sorry, but we at the moment doing several things at the same time. Now it's ok