I don't think this solution really works in my circumstance, which is that I use Winbind with PAM/NSS for *all* user's logons. Because my systems are joined to a domain and are standard desktop machines.
I would need to add *all* users to this group. This is not very practical.
It seems my use case of joining a machine to a Windows domain and expecting Windows users to be able to log in is pretty obvious.
I don't think this solution really works in my circumstance, which is that I use Winbind with PAM/NSS for *all* user's logons. Because my systems are joined to a domain and are standard desktop machines.
I would need to add *all* users to this group. This is not very practical.
It seems my use case of joining a machine to a Windows domain and expecting Windows users to be able to log in is pretty obvious.