Distribution EOLE

Le premier problème constaté est dû à un changement de comportement dans netcmd/__init__.py comparé à la version de samba présent sur EOLE 2.9.

La méthode _run ne comprend plus la partie de code responsable de renseigner l’attribut command_name, déporté dans la méthode _resolve.

Le deuxième problème le changement de comportement de la commande samba-tool gpo restore : suppression du répertoire temporaire avant la tentative de restauration.

GPO 'eole_script' created as {324D353D-17F6-40FD-94F4-1CE66F0D9DF1}
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line 1668, in run
    self.restore_from_backup_to_local_dir(backup, self.gpodir,
  File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line 1569, in restore_from_backup_to_local_dir
    os.mkdir(targetdir)
FileNotFoundError: [Errno 2] No such file or directory: '/tmp/tmp5hexp69z/policy/{324D353D-17F6-40FD-94F4-1CE66F0D9DF1}'
[Errno 2] No such file or directory: '/tmp/tmp5hexp69z/policy/{324D353D-17F6-40FD-94F4-1CE66F0D9DF1}'
Failed to restore GPO -- deleting...
GPO {324D353D-17F6-40FD-94F4-1CE66F0D9DF1} deleted.
ERROR: Failed to restore: [Errno 2] No such file or directory: '/tmp/tmp5hexp69z/policy/{324D353D-17F6-40FD-94F4-1CE66F0D9DF1}'

Le troisième problème est le manque de droits accordés à l’utilisateur gpo-dc1 (membre du groupe gpoadmins) pour la commande samba-tool gpo restore (la commande avec le compte administrator est fonctionnelle).

samba-tool gpo restore --tmpdir /tmp -H ldap://dc1.domseth.ac-test.fr -Ugpo-dc1@DOMSETH.AC-TEST.FR%amhSkDLGg60sexLKkSAuOGF4LiUNqROCJ0bssK7m4n eole_script /var/tmp/eole_script/policy --restore-metadata
WARNING: Using passwords on command line is insecure. Installing the setproctitle python module will hide these from shortly after program start.
GPO 'eole_script' created as {61729543-5AF9-48CB-AA3E-C0751DB2A30D}
WARNING: No such parser for ps.ps1
WARNING: Falling back to simple copy-restore.
WARNING: No such parser for comment.cmtx
WARNING: Falling back to simple copy-restore.
WARNING: No such parser for installMinion.ps1
WARNING: Falling back to simple copy-restore.
WARNING: No such parser for Registry.xml
WARNING: Falling back to simple copy-restore.
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line 1674, in run
    copy_directory_local_to_remote(self.conn, self.gpodir,
  File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line 382, in copy_directory_local_to_remote
    conn.savefile(r_name, data)
samba.NTSTATUSError: (3221225506, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
(3221225506, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')