Create a file /usr/local/samba/etc/cret (permissions must not be world-readable!) with the following content (adapt the password!):.Path = /usr/local/samba/var/locks/sysvol/ Create the file /etc/nf (adapt the path variable to your PDC Emulators SysVol path):.Only_from = 10.99.0.0/28 # Restrict to your DC address(es) or ranges, to prevent other hosts retrieving the content, too. If you start your rsync-server through xinetd, you can use the following configuration file ( /etc/xinetd.d/rsync):.Make sure that you use a version that supports extended ACL's! Install rsync by using your package manager or by compiling from source.Setup the SysVol replication Setup on the Domain Controller with the PDC Emulator FSMO role The rsync module on the PDC Emulator is also defined as read only, because it is used only as the source, so no content can be pushed to it. It should be sufficient for most to use an unencrypted transfer. If you prefer to use rsync through a SSH tunnel, you can adapt the command to your needs, but usually there's no confidential content on the SysVol share. already available on most distributions and can be installed through it's package manager (if it's not already installed anyway).There you should select „The domain controller with the Operations Master token for the PDC emulator“ (default).Įven if the unidirectional replication of rsync is a limitation, it has also many advantages: You can define at „Action“ / „Change Domain Controller“ which machine the GPMC connects to. All other DC's retrieve the changes from this host, this is because modifications on them are overwritten when syncing.Ī good choice for this 'master' host is the one that contains the FSMO role 'PDC Emulator', because you can configure the Group Policy Management Console to connect only to this machine (default), instead of just choosing any of your DC's. That's why for rsync-based SysVol replication, you have to choose one DC on which you do all modifications (GPO edits, logon script changes, etc.). This tool is unidirectional, this means files can only be transferred in one direction. This HowTo describes a solution for SysVol replication based on rsync. Group Policy Management Console option for PDC

Smb emulator