[Samba] long scripts

[David Mulder]

On 10/14/22 10:25 AM, David Mulder via samba wrote:
>
> On 10/14/22 10:25 AM, Rowland Penny via samba wrote:
>> Ah, sorry my mistake. However, couldn't winbind be extend to also do 
>> user policy and then oddjob-gpupdate wouldn't be required ?
>>
>>
> Absolutely. I've been meaning to finish this for some time... and 
> started working on it as soon as we started this discussion :)
>
Here's an MR partially addressing this: 
https://gitlab.com/samba-team/samba/-/merge_requests/2755

This will only enforce policy at logon though. Managing enforcement 
*while logged in* though seems trickier. I'll need to stop enforcement 
once a user logs off, and we can't have winbind enforcing policy for 
each session of the same logged on user. Consider if a single user had 
hundreds of sessions on one host, and samba-gpupdate is getting run 
periodically for each session of the same user.

-- 
David Mulder
Labs Software Engineer, Samba
SUSE
1221 S Valley Grove Way, Suite 500
Pleasant Grove, UT 84062
(P)+1 385.208.2989
dmulder at suse.com
http://www.suse.com