samba.git/python/samba/gp_sec_ext.py, branch talloc-2.2.0

python/samba: PY3 port gpo.apply smbtorture test

2018-12-10T09:38:22+00:00

1) configparser.set requires string values
2) self.gp_db.store() etc. neex to pass str object for
   xml.etree.ElementTree.Element text attribute which needs
   to be text
3) tdb delete method needs bytes key
4) configparser.write needs a file opened in text mode

Signed-off-by: Noel Power 
Reviewed-by: Andrew Bartlett

gpo: add unapply to the gp_sec_ext

2018-10-08T16:17:16+00:00

Signed-off-by: David Mulder 
Reviewed-by: Douglas Bagnall 
Reviewed-by: Aurelien Aptel

gpo: remove unreached non-DC branch in gp_sec_ext.apply_map()

2018-10-08T16:17:15+00:00

We don't get this far if we are not a DC, and if somehow we do the
errors will be no more informative due to this special case.

Signed-off-by: David Mulder 
Reviewed-by: Douglas Bagnall 
Reviewed-by: Aurelien Aptel

gpo: Move policy application to the gp_ext

2018-10-08T16:17:15+00:00

Policy specific setting application should be
handled by the group policy extension, not the
read/parse handler.

Signed-off-by: David Mulder 
Reviewed-by: Douglas Bagnall 
Reviewed-by: Aurelien Aptel

gpo: Remove unused gp_ext.list() function

2018-10-08T16:17:15+00:00

Signed-off-by: David Mulder 
Reviewed-by: Douglas Bagnall 
Reviewed-by: Aurelien Aptel

gpo: Implement process_group_policy() gp_ext func

2018-10-08T16:17:15+00:00

MS spec describes the policy callback as a
function called ProcessGroupPolicy which accepts
a pDeletedGPOList and a pChangedGPOList param.
The Group Policy Client Side Extension then
iterates over the deleted, then the changed gpo
lists and applies/unapplies policy. We should do
this also.

Signed-off-by: David Mulder 
Reviewed-by: Douglas Bagnall 
Reviewed-by: Aurelien Aptel

gpo: Remove unused methods from gp_sec_ext

2018-10-08T16:17:15+00:00

These functions were added by Luke, but have
never actually done anything. If/when we
read from these *.pol files, we won't need these
separate functions to do it.

Signed-off-by: David Mulder 
Reviewed-by: Douglas Bagnall 
Reviewed-by: Aurelien Aptel

gpo: gp_sec_ext should check whether to apply

2018-10-08T16:17:14+00:00

Whether an extension should apply should be
determined by the extension, not by the
calling script.

Signed-off-by: David Mulder 
Reviewed-by: Douglas Bagnall 
Reviewed-by: Aurelien Aptel

PEP8: fix E127: continuation line over-indented for visual indent

2018-09-06T10:10:12+00:00

Signed-off-by: Joe Guo 
Reviewed-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

PEP8: fix E124: closing bracket does not match visual indentation

2018-09-06T10:10:12+00:00

Signed-off-by: Joe Guo 
Reviewed-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett