Comment # 6 on bug 1166407 from Philippe Andersson

As promised, here is my feedback regarding the behaviour of domain member
servers and AD domain controllers.

First, the good news is that we've not noticed any specificity to these roles
at this stage in terms of required AppArmor profiles.

*But* we discovered that an extra line needed to be added to 'usr.sbin.nmbd' in
order to allow the daemon to generate a namelist dump when requested to through
 SIGHUP (debugging feature):

  /var/cache/samba/namelist.debug rwk,

That entry does not appear to have been included in any official OpenSUSE
update or upgrade yet.