[Samba] long scripts

David Mulder dmulder at samba.org
Mon Oct 17 17:01:35 UTC 2022

On 10/14/22 10:25 AM, David Mulder via samba wrote:
> On 10/14/22 10:25 AM, Rowland Penny via samba wrote:
>> Ah, sorry my mistake. However, couldn't winbind be extend to also do 
>> user policy and then oddjob-gpupdate wouldn't be required ?
> Absolutely. I've been meaning to finish this for some time... and 
> started working on it as soon as we started this discussion :)
Here's an MR partially addressing this: 

This will only enforce policy at logon though. Managing enforcement 
*while logged in* though seems trickier. I'll need to stop enforcement 
once a user logs off, and we can't have winbind enforcing policy for 
each session of the same logged on user. Consider if a single user had 
hundreds of sessions on one host, and samba-gpupdate is getting run 
periodically for each session of the same user.

David Mulder
Labs Software Engineer, Samba
1221 S Valley Grove Way, Suite 500
Pleasant Grove, UT 84062
(P)+1 385.208.2989
dmulder at suse.com

More information about the samba mailing list