[Samba] time based group membership in FL 2016

Stefan Kania stefan at kania-online.de
Wed Jan 31 16:21:06 UTC 2024


Hi all,

it's again a question about FL 2016 and if samba supports it. If yes, 
how can I use it without powershell.

In FL 2016 there is the possibility to put a user into a group and the 
membership is time based. So I could put the user Foo into the group 
'domain admins' for 30 minutes and after 30 minutes the system will 
remove user foo from the group.

But to activated this feature you have to give a powershell command:
----------------
Enable-ADOptionalFeature "Privileged Access Management Feature" -Scope 
ForestOrConfigurationSet -Target example.net"
-----------------

This feature once enabled can't be disabled anymore

Then I could add a user to a group:
---------------
Add-ADGroupMember -Identity "Domain Admins" -Members "Foo" 
-MemberTimeToLive (New-TimeSpan -Minutes 30)
---------------

After 30 minutes Foo will be removed automatically.

But if this feature is supported by samba 4.19 or 4.20 with FL 2016 
activated, how could I set this?

Stefan


More information about the samba mailing list