samba - Apr 2015 - sssd-ad cannot be installed with sernet samba

On 01/04/15 18:56, Luca Olivetti wrote:
> El 01/04/15 a les 17:59, buhorojo ha escrit:
>
>> The poster reported that nss doesn't work. Try it. Both getent and
id
>> return errors with winbind. That's an error with sernet, not sssd.
Many
>> of the questions on this list are about errors with nss. sssd makes
>> those errors go away.
> Actually I reported that I couldn't install the sssd-ad package
> alongside the sernet-samba packages.
> I didn't even try winbind, because it's not supposed to work on the
DC.
>
> Bye
Ah, OK. We have samba 4.1 from about a year ago and it doesn't work, 
which is why I think sssd was installed back then. If sernet has a more 
recent version it has most likely been fixed. Give it a try without 
sssd? If you do, can you post back here?
B

El 01/04/15 a les 21:50, buhorojo ha escrit:
> On 01/04/15 18:56, Luca Olivetti wrote:
>> El 01/04/15 a les 17:59, buhorojo ha escrit:
>>
>>> The poster reported that nss doesn't work. Try it. Both getent
and id
>>> return errors with winbind. That's an error with sernet, not
sssd. Many
>>> of the questions on this list are about errors with nss. sssd makes
>>> those errors go away.
>> Actually I reported that I couldn't install the sssd-ad package
>> alongside the sernet-samba packages.
>> I didn't even try winbind, because it's not supposed to work on
the DC.
>>
>> Bye
> Ah, OK. We have samba 4.1 from about a year ago and it doesn't work,
> which is why I think sssd was installed back then. If sernet has a more
> recent version it has most likely been fixed. Give it a try without
> sssd? If you do, can you post back here?
I'm currently using the ldap backend of sssd, previously I tried nslcd,
again, successfully.
The ad backend of sssd seemed the most obvious solution, however I won't
lose sleep over it.

Bye

-- 
Luca Olivetti
Wetron Automation Technology http://www.wetron.es
Tel. +34 935883004  Fax +34 935883007

On 01/04/15 22:00, Luca Olivetti wrote:
> El 01/04/15 a les 21:50, buhorojo ha escrit:
>> On 01/04/15 18:56, Luca Olivetti wrote:
>>> El 01/04/15 a les 17:59, buhorojo ha escrit:
>>>
>>>> The poster reported that nss doesn't work. Try it. Both
getent and id
>>>> return errors with winbind. That's an error with sernet,
not sssd. Many
>>>> of the questions on this list are about errors with nss. sssd
makes
>>>> those errors go away.
>>> Actually I reported that I couldn't install the sssd-ad package
>>> alongside the sernet-samba packages.
>>> I didn't even try winbind, because it's not supposed to
work on the DC.
>>>
>>> Bye
>> Ah, OK. We have samba 4.1 from about a year ago and it doesn't
work,
>> which is why I think sssd was installed back then. If sernet has a more
>> recent version it has most likely been fixed. Give it a try without
>> sssd? If you do, can you post back here?
> I'm currently using the ldap backend of sssd, previously I tried nslcd,
> again, successfully.
> The ad backend of sssd seemed the most obvious solution, however I
won't
> lose sleep over it.
>
> Bye
>
I don't think you're losing so much. One of the best bits of sssd-ad is 
the dns update, which you don't use on a dc anyway.
B

I dont get al this hassle... ( again ) 

Sernet works fine, all my server (DCs/member) are useing sernet samba.
Only not my proxy servers. these backported samba.. ( because of a modified
squid im using)
You just need to setup as the wiki says. 

nss/winbind does work, yes, there is 1 missing file, just created it.
( and this is not needed on a DC ! ) 
winbind does work, but on DC winbind a bit different yes. 

If you really want sernet support, buy the support at sernet. 
Is already nice of them that the are making packages. 

and still, lots of talk here, but no is saying what is not working. 
yes.. 1 missing file, read the wiki, the solution is there also. 

sssd does not works.. thats a sssd problem and WHY does sssd not work, 
ever try to recomple it.. i did on ubuntu and debian.. 
but then you know. sernet only supplies samba, and not sssd kerberos etc.. 
which are all depends of sssd. 

so setup samba from distro or source and use sssd,
or setup samba with sernet packages, and use nss/winbind. 

then if you have a problem post it here again. 
Again to much time spend on a topic which cames over every few months. 


Greetz, 

Louis



>-----Oorspronkelijk bericht-----
>Van: buhorojo.lcb at gmail.com 
>[mailto:samba-bounces at lists.samba.org] Namens buhorojo
>Verzonden: woensdag 1 april 2015 22:12
>Aan: samba at lists.samba.org
>Onderwerp: Re: [Samba] sssd-ad cannot be installed with sernet samba
>
>On 01/04/15 22:00, Luca Olivetti wrote:
>> El 01/04/15 a les 21:50, buhorojo ha escrit:
>>> On 01/04/15 18:56, Luca Olivetti wrote:
>>>> El 01/04/15 a les 17:59, buhorojo ha escrit:
>>>>
>>>>> The poster reported that nss doesn't work. Try it. Both
>getent and id
>>>>> return errors with winbind. That's an error with
sernet,
>not sssd. Many
>>>>> of the questions on this list are about errors with nss. 
>sssd makes
>>>>> those errors go away.
>>>> Actually I reported that I couldn't install the sssd-ad
package
>>>> alongside the sernet-samba packages.
>>>> I didn't even try winbind, because it's not supposed to
>work on the DC.
>>>>
>>>> Bye
>>> Ah, OK. We have samba 4.1 from about a year ago and it doesn't
work,
>>> which is why I think sssd was installed back then. If 
>sernet has a more
>>> recent version it has most likely been fixed. Give it a try without
>>> sssd? If you do, can you post back here?
>> I'm currently using the ldap backend of sssd, previously I 
>tried nslcd,
>> again, successfully.
>> The ad backend of sssd seemed the most obvious solution, 
>however I won't
>> lose sleep over it.
>>
>> Bye
>>
>I don't think you're losing so much. One of the best bits of 
>sssd-ad is 
>the dns update, which you don't use on a dc anyway.
>B
>
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba
>
>