Hi Alexey
I think samba-tool has a method but only when the server is acting as an AD server (which
I believe RH does not support as it happens).
But the things I am involved in have RHEL servers as AD “clients” so maybe it will be a
case of hacking some form of query on the cache you mention.
Thanks for the response.
Phil
--
Phil J Fisher
UNIX Technology Consultant
DXC Technology
phil.fisher@dxc.com<mailto:phil.fisher@dxc.com>
DXC.com
From: Alexey Tikhonov <atikhono(a)redhat.com>
Sent: 23 June 2022 15:50
To: End-user discussions about the System Security Services Daemon
<sssd-users(a)lists.fedorahosted.org>
Subject: [SSSD-users] Re: SSSD-users: querying GPO list
On Thu, Jun 23, 2022 at 3:19 PM Fisher, Philip
<phil.fisher@dxc.com<mailto:phil.fisher@dxc.com>> wrote:
Hello SSSD people
Is there a way to run (on RHEL 8 specifically) a command or query information so that a
logged in (authorised) user can see the GPOs that are active for the session? I have
tried Mr. Goggle without success.
I don't think there is a suitable command that SSSD provides.
Maybe Samba suit does? I don't know.
SSSD caches downloaded GPOs in `/var/lib/sss/gpo_cache/`, but those aren't intended
for general human consumption.
This information I realise may be obtained from the actual AD server but in general this
access is not available hence this query.
Thanks.
--
Phil J Fisher
DXC Technology Company -- This message is transmitted to you by or on behalf of DXC
Technology Company or one of its affiliates. It is intended exclusively for the
addressee. The substance of this message, along with any attachments, may contain
proprietary, confidential or privileged information or information that is otherwise
legally exempt from disclosure. Any unauthorized review, use, disclosure or distribution
is prohibited. If you are not the intended recipient of this message, you are not
authorized to read, print, retain, copy or disseminate any part of this message. If you
have received this message in error, please destroy and delete all copies and notify the
sender by return e-mail. Regardless of content, this e-mail shall not operate to bind DXC
Technology Company or any of its affiliates to any order or other contract unless pursuant
to explicit written agreement or government initiative expressly permitting the use of
e-mail for such purpose.
_______________________________________________
sssd-users mailing list --
sssd-users@lists.fedorahosted.org<mailto:sssd-users@lists.fedorahosted.org>
To unsubscribe send an email to
sssd-users-leave@lists.fedorahosted.org<mailto:sssd-users-leave@lists.fedorahosted.org>
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/<https://...
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines<https://clickti...
List Archives:
https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahoste...
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure<https://clicktime.symantec.com...