[Samba] Temporary group membership

[Mason Schmitt]

Hello,

Windows Server 2016 apparently has a temporary group membership feature -
http://woshub.com/temporary-membership-in-active-directory-groups/.  Does
Samba have support for this?  If not, is anyone aware of an alternative way
to achieve the same goal?

I can see using existing tools for programmatically adding users to groups,
but I anticipate problems with revoking group membership in the middle of a
user's session.  As the article says, the kerberos ticket needs to time out
and I'm not sure how I'd do that.

-- 

Mason