On 10/14/22 10:07 AM, Rowland Penny via samba wrote:> I don't know, you suggested that sssd can run oddjob-gpudate, so > winbind needs to be able to do that at least, or can it already do it ? >Winbind already works with oddjob-gpupdate. I meant oddjob-gpupdate runs independently of sssd and winbind. If you're running winbind, it has the gpupdate execution builtin (but only for machine policy). Currently you only get user policy if you run oddjob-gpupdate. You can use oddjob-gpupdate with either winbind or sssd. -- David Mulder Labs Software Engineer, Samba SUSE 1221 S Valley Grove Way, Suite 500 Pleasant Grove, UT 84062 (P)+1 385.208.2989 dmulder at suse.com http://www.suse.com
On 14/10/2022 17:10, David Mulder via samba wrote:> > On 10/14/22 10:07 AM, Rowland Penny via samba wrote: >> I don't know, you suggested that sssd can run oddjob-gpudate, so >> winbind needs to be able to do that at least, or can it already do it ? >> > Winbind already works with oddjob-gpupdate. I meant oddjob-gpupdate runs > independently of sssd and winbind. If you're running winbind, it has the > gpupdate execution builtin (but only for machine policy). Currently you > only get user policy if you run oddjob-gpupdate. You can use > oddjob-gpupdate with either winbind or sssd. >Ah, sorry my mistake. However, couldn't winbind be extend to also do user policy and then oddjob-gpupdate wouldn't be required ? Rowland