Using samba's ntacl support requires CAP_SYS_ADMIN

[phlogistonjohn]

Currently samba wants to write ALCs into security.NTACL which requires the admin capablity - aka a privileged container.

An effort to make this configurable in samba is located here:
https://gitlab.com/samba-team/samba/-/merge_requests/1908

PS. I thought I had tracked this already but I either tracked it somewhere else and forgot where or simply forgot previously. Don't be too shocked if you find a dupe of this :-)

[anoopcs9]

PS. I thought I had tracked this already but I either tracked it somewhere else and forgot where or simply forgot previously. Don't be too shocked if you find a dupe of this :-)

samba-in-kubernetes/sambacc#10 has comparatively more updates. I hope we can continue there instead?

[anoopcs9]

Closing in favour of samba-in-kubernetes/sambacc#10.