Alex
2022-Jan-10 14:48 UTC
[Samba] Authentication issue after updating samba on CentOS 7 (from yum)
Rowland, It's probably easier to migrate to winbindd than to switch the distribution. Fortunately, I've just found which patch has broken things - [PATCH 68/88] CVE-2020-25717: s3:auth: we should not try to Anyway, thanks for your help!> On Mon, 2022-01-10 at 15:20 +0300, Alex wrote: >> Rowland, >> >> > >> >> > Have you considered using Debian 11 with the Samba packages from >> > Louis's repo: >> > https://apt.van-belle.nl/simple-repo-setup.txt >> >> I'd love to switch to Louis's repo, but this server is CentOS 7.> I know, that is why I wrote 'Have you considered using Debian 11' > This is know to work without great effort and Debian is as much an > enterprise distro as Centos is.-- Best regards, Alex
Rowland Penny
2022-Jan-10 15:49 UTC
[Samba] Authentication issue after updating samba on CentOS 7 (from yum)
On Mon, 2022-01-10 at 17:48 +0300, Alex wrote:> Rowland, > > It's probably easier to migrate to winbindd than to switch the > distribution.Are you using sssd ? I thought you were using winbind. If you are using sssd, there is a Samba bug about this: https://bugzilla.samba.org/show_bug.cgi?id=14913 Which leads to this: https://access.redhat.com/articles/4355391 The bottom line of this is that RHEL doesn't really support using sssd with Samba unless you also use idmap_sss and then only for one domain and winbind must also be running. You also will not be able to use NSS & PAM services. Of course your interpretation may differ, but that is the way I read it. Rowland