[Samba] Unable to set SeDiskOperatorPrivilege (again)

[Rowland Penny]

On Thu, 25 May 2017 08:34:13 +1000
John Gardeniers via samba <samba at lists.samba.org> wrote:

> Hi Rowland,
> 
> You say that winbind can do anything that sssd can, yet I've not been 
> able to find winbind instructions similar to these for sssd: 
> http://jhrozek.livejournal.com/3860.html
> 
> Do you know of such instructions? 

Yes, I did it some time ago.

> More particularly, do you know
> how with winbind we can lock sudoers down to specific OUs? 

It is not sssd that allows you to lock sudoers, it is the sudo rules
you put in AD

> We need
> to do a lot more than basic authentication and simple file sharing.
> From both this thread and previous ones I suspect our environment is
> more complex that what you're familiar with.

You mean running a domain with autofs, sudo, mailserver etc in AD,
yes you are quite right, I haven't a clue LOL

Rowland