samba - May 2017 - Samba 4.3.x - only AUTH with AD (no Domain Join of Samba) ?

Hello,
is it possible to configure Samba that only check User+Password is OK on a
Active Directory Server ´s (
No Domain Join of the Samba Server) ?

Thanks
Dennis

On Wed, May 24, 2017 at 05:34:16AM +0000, Schneck, Dennis <Dennis.Schneck---
via samba wrote:
> is it possible to configure Samba that only check User+Password is OK on a
Active Directory Server ´s (
> No Domain Join of the Samba Server) ?
This used to be "security=server", which was removed a while ago,
because it's not possibly to do that with modern NTLM flavors.

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de

Hello Volker,
if I understand right, that is not possible.
The Samba Server has to be Join to the Domain and then it will work !?

Thanks

>-----Original Message-----
>From: Volker Lendecke [mailto:Volker.Lendecke at sernet.de]
>Sent: Wednesday, May 24, 2017 7:57 AM
>To: Schneck, Dennis <Dennis.Schneck at schulergroup.com>
>Cc: samba at lists.samba.org
>Subject: Re: [Samba] Samba 4.3.x - only AUTH with AD (no Domain Join of
>Samba) ?
>
>On Wed, May 24, 2017 at 05:34:16AM +0000, Schneck, Dennis
><Dennis.Schneck--- via samba wrote:
>> is it possible to configure Samba that only check User+Password is OK
on a
>Active Directory Server ´s (
>> No Domain Join of the Samba Server) ?
>
>This used to be "security=server", which was removed a while ago,
>because it's not possibly to do that with modern NTLM flavors.
>
>Volker
>
>--
>SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
>phone: +49-551-370000-0, fax: +49-551-370000-9
>AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
>http://www.sernet.de, mailto:kontakt at sernet.de

Hi Dennis,

We do this using sssd. Samba is not even required on the client machine.

regards,
John


On 24/05/17 15:34, Schneck, Dennis <Dennis.Schneck--- via samba
wrote:
> Hello,
> is it possible to configure Samba that only check User+Password is OK on a
Active Directory Server ´s (
> No Domain Join of the Samba Server) ?
>
> Thanks
> Dennis
>

On Wed, May 24, 2017 at 04:06:02PM +1000, John Gardeniers via samba
wrote:
> We do this using sssd. Samba is not even required on the client machine.
That might work for PAM logins. I don't think it will for SMB
services. The OP was asking to configure Samba, to me this means to
serve SMB.

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de