On 14/10/2022 17:10, David Mulder via samba wrote:>
> On 10/14/22 10:07 AM, Rowland Penny via samba wrote:
>> I don't know, you suggested that sssd can run oddjob-gpudate, so
>> winbind needs to be able to do that at least, or can it already do it ?
>>
> Winbind already works with oddjob-gpupdate. I meant oddjob-gpupdate runs
> independently of sssd and winbind. If you're running winbind, it has
the
> gpupdate execution builtin (but only for machine policy). Currently you
> only get user policy if you run oddjob-gpupdate. You can use
> oddjob-gpupdate with either winbind or sssd.
>
Ah, sorry my mistake. However, couldn't winbind be extend to also do
user policy and then oddjob-gpupdate wouldn't be required ?
Rowland