samba - Oct 2017 - winbind rfc2307 not being obeyed

On Mon, 30 Oct 2017 10:58:01 -0600
Jeff Sadowski <jeff.sadowski at gmail.com> wrote:
> nope that just brute forced homedir and shell. It'll work for what I
> want this machine for but I'd like to get the homedir and shell from
> AD
> 
The only real thing running authconfig did to the smb.conf was to add:

   password server = MIND.UNM.EDU

You shouldn't need this, so I think your dns is up the spout ;-)

If you have populated the users uidNumber, loginShell and
unixHomeDirectory attributes the winbind 'ad' backend should use them,
provided that Domain Users has a gidNumber attribute and all numbers
used are inside the DOMAIN range set in smb.conf

Can you post your /etc/hosts, /etc/resolv.conf and /etc/krb5.conf files

Rowland

No, fedora is action strange. it isn't getting the  loginShell and
unixHomeDirectory attributes even if I take out the templates. also it
sets a bunch of other files up and I'm not sure what all it is doing.

On Mon, Oct 30, 2017 at 11:24 AM, Rowland Penny via samba
<samba at lists.samba.org> wrote:
> On Mon, 30 Oct 2017 10:58:01 -0600
> Jeff Sadowski <jeff.sadowski at gmail.com> wrote:
>
>> nope that just brute forced homedir and shell. It'll work for what
I
>> want this machine for but I'd like to get the homedir and shell
from
>> AD
>>
>
> The only real thing running authconfig did to the smb.conf was to add:
>
>    password server = MIND.UNM.EDU
>
> You shouldn't need this, so I think your dns is up the spout ;-)
>
> If you have populated the users uidNumber, loginShell and
> unixHomeDirectory attributes the winbind 'ad' backend should use
them,
> provided that Domain Users has a gidNumber attribute and all numbers
> used are inside the DOMAIN range set in smb.conf
>
> Can you post your /etc/hosts, /etc/resolv.conf and /etc/krb5.conf files
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

On Mon, 30 Oct 2017 12:22:54 -0600
Jeff Sadowski <jeff.sadowski at gmail.com> wrote:
> No, fedora is action strange. it isn't getting the  loginShell and
> unixHomeDirectory attributes even if I take out the templates. also it
> sets a bunch of other files up and I'm not sure what all it is doing.
> 
Forget it is Fedora, do not use their tools and set up the individual
files and most importantly, remove sssd

Rowland