[Samba] Temporary group membership

Mason Schmitt mason at ftlcomputing.com
Thu May 7 17:51:54 UTC 2020


Windows Server 2016 apparently has a temporary group membership feature -
http://woshub.com/temporary-membership-in-active-directory-groups/.  Does
Samba have support for this?  If not, is anyone aware of an alternative way
to achieve the same goal?

I can see using existing tools for programmatically adding users to groups,
but I anticipate problems with revoking group membership in the middle of a
user's session.  As the article says, the kerberos ticket needs to time out
and I'm not sure how I'd do that.



More information about the samba mailing list