diff options
| author | David Mulder <dmulder@suse.com> | 2017-11-21 03:44:12 -0700 |
|---|---|---|
| committer | Stefan Metzmacher <metze@samba.org> | 2018-01-13 22:38:05 +0100 |
| commit | 2ca73cba53621c6db79f769f625316535fbfdbc9 (patch) | |
| tree | 87a83f1fd5aba3330cf1708a78bfbe70e763cb3e /docs-xml | |
| parent | fb5241aa9d3fe8319ff5232b8a3d1987d03ba7bf (diff) | |
| download | samba-2ca73cba53621c6db79f769f625316535fbfdbc9.tar.gz | |
gpo: Add the winbind call to gpupdate
Signed-off-by: David Mulder <dmulder@suse.com>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Diffstat (limited to 'docs-xml')
| -rw-r--r-- | docs-xml/smbdotconf/domain/gpoupdatecommand.xml | 11 | ||||
| -rw-r--r-- | docs-xml/smbdotconf/winbind/applygrouppolicies.xml | 19 |
2 files changed, 26 insertions, 4 deletions
diff --git a/docs-xml/smbdotconf/domain/gpoupdatecommand.xml b/docs-xml/smbdotconf/domain/gpoupdatecommand.xml index 22a42163f27..77b596051b7 100644 --- a/docs-xml/smbdotconf/domain/gpoupdatecommand.xml +++ b/docs-xml/smbdotconf/domain/gpoupdatecommand.xml @@ -5,10 +5,13 @@ xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> <description> <para>This option sets the command that is called to apply GPO policies. - The samba_gpoupdate script applies System Access and Kerberos Policies. - System Access policies set minPwdAge, maxPwdAge, minPwdLength, and - pwdProperties in the samdb. Kerberos Policies set kdc:service ticket lifetime, - kdc:user ticket lifetime, and kdc:renewal lifetime in smb.conf. + The samba_gpoupdate script applies System Access and Kerberos Policies + to the KDC, or Environment Variable policies to client machines. System + Access policies set minPwdAge, maxPwdAge, minPwdLength, and + pwdProperties in the samdb. Kerberos Policies set kdc:service ticket + lifetime, kdc:user ticket lifetime, and kdc:renewal lifetime in + smb.conf. Environment Variable policies apply environment variables, + such as PATH, to /etc/profile. </para> </description> diff --git a/docs-xml/smbdotconf/winbind/applygrouppolicies.xml b/docs-xml/smbdotconf/winbind/applygrouppolicies.xml new file mode 100644 index 00000000000..67baa0d1426 --- /dev/null +++ b/docs-xml/smbdotconf/winbind/applygrouppolicies.xml @@ -0,0 +1,19 @@ +<samba:parameter name="apply group policies" + context="G" + type="boolean" + xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> +<description> + + <para>This option controls whether winbind will execute the gpupdate + command defined in <smbconfoption name="gpo update command"/> on the + Group Policy update interval. The Group Policy update interval is + defined as every 90 minutes, plus a random offset between 0 and 30 + minutes. This applies Group Policy Machine polices to the client or + KDC and machine policies to a server. + </para> + +</description> + +<value type="default">no</value> +<value type="example">yes</value> +</samba:parameter> |