[Samba] deny file access or specific users

[mj]

Hi Rowland,

Thanks for the quick reply.

On 10/10/2018 11:16 AM, Rowland Penny via samba wrote:
>> Probably running net cache flush will remove the user on server2 as
>> well, but is there an expiration on the winbind cache? Will the user
>> disppear from server2 automatically after a certain period?
> 
> Yes, provided the user isn't logged into or connected to the share.
Ok, I will wait a few days longer, and then check again.

>> Or is there a better way to keeping everything, while centrally
>> denying fileserver access for specific users?
> 
> Yes, set the users permissions with 'setfacl' or from Windows.
Hmm not sure if that feels better for our case.

Thanks for the help!

mj