samba.git/python/samba/gp, branch talloc-2.4.4

Add check for the GPO link to have at least two attributes separated by semicolumn. Allows to handle empty links.

2025-07-10T18:55:33+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15877
RN: Fix handling of empty GPO link

Singed-off-by: Alex Sharov (kororland@gmail.com)
Reviewed-by: Douglas Bagnall 
Reviewed-by: Andreas Schneider 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Thu Jul 10 18:55:33 UTC 2025 on atb-devel-224

python:gp_cert_auto_enrol: fix GUID stringification

2025-03-25T05:21:49+00:00

We were using some broken ad-hoc unpacking to do what the ndr
unpacker does perfectly well.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15839

Signed-off-by: Douglas Bagnall 
Reviewed-by: Jennifer Sutton 

Autobuild-User(master): Douglas Bagnall 
Autobuild-Date(master): Tue Mar 25 05:21:49 UTC 2025 on atb-devel-224

python: Fix NtVer check for site_dn_for_machine()

2024-04-17T19:32:11+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15633

Signed-off-by: Andreas Schneider 
Reviewed-by: David Mulder 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Wed Apr 17 19:32:11 UTC 2024 on atb-devel-224

python:gp: Implement client site lookup in site_dn_for_machine()

2024-02-26T08:06:08+00:00

This is [MS-GPOL] 3.2.5.1.4 Site Search.

The netr_DsRGetSiteName() needs to run over local rpc, however we do not
have the call implemented in our rpc_server. What netr_DsRGetSiteName()
actually does is an ldap query to get the sitename, we can just do the
same.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15588

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Mon Feb 26 08:06:08 UTC 2024 on atb-devel-224

python:gp: Fix logging with gp

2024-01-30T07:18:05+00:00

This allows enable INFO level logging with: `samba-gpupdate -d3`

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15558

Signed-off-by: Andreas Schneider 
Reviewed-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Tue Jan 30 07:18:05 UTC 2024 on atb-devel-224

python:gp: Improve working of log messages to avoid confusion

2024-01-29T10:37:29+00:00

We should not use the word "Failed". We are totally fine if we can't
connect to NDES in the meantime. This logs:

Try to get root or server certificates.
Unable to install root certificates (requires NDES).
Installing the server certificate only.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15559

Signed-off-by: Andreas Schneider 
Reviewed-by: David Mulder 
Reviewed-by: Pavel Filipenský 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Mon Jan 29 10:37:29 UTC 2024 on atb-devel-224

python:gp: Log an error if update fails

2024-01-29T09:32:46+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15559

Signed-off-by: Andreas Schneider 
Reviewed-by: David Mulder 
Reviewed-by: Pavel Filipenský

python:gp: Do not print an error if template already exists

2024-01-29T09:32:46+00:00

We will get an exit status for duplicate in future:
https://www.pagure.io/certmonger/issue/269
We can't really fix that right now, as older version of certmonger
don't support the `-v` option.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15559

Signed-off-by: Andreas Schneider 
Reviewed-by: David Mulder 
Reviewed-by: Pavel Filipenský

python:gp: Do not print an error, if CA already exists

2024-01-29T09:32:46+00:00

We will get an exit status for duplicate in future:
https://www.pagure.io/certmonger/issue/269
We can't really fix that right now, as older version of certmonger
don't support the `-v` option.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15559

Signed-off-by: Andreas Schneider 
Reviewed-by: David Mulder 
Reviewed-by: Pavel Filipenský

python:gp: Improve logging for certificate enrollment

2024-01-29T09:32:46+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15559

Signed-off-by: Andreas Schneider 
Reviewed-by: David Mulder 
Reviewed-by: Pavel Filipenský