samba - Jan 2022 - pam_winbind, ssh and cross-forest membership...

On Tue, 2022-01-11 at 14:38 +0100, Marco Gaiarin via samba
wrote:
> Mandi! Rowland Penny via samba
>   In chel di` si favelave...
> 
> > Have you set up trusts between 'SUBA.DOM.IT' and
'DOM.IT' ?
> 
> Sure!
> 
> 
> > >       id a
> > Problem is, you should be using 'id DOMAIN\\a' , where
'DOMAIN' is
> > the
> > workgroup of user 'a'.
> 
> Forgot to say: 'winbind use default domain = Yes'.
Then remove it, you cannot use it with multiple domains.

Rowland

Mandi! Rowland Penny via samba
  In chel di` si favelave...
>> Forgot to say: 'winbind use default domain = Yes'.
> Then remove it, you cannot use it with multiple domains.
Rowland, Andrew some month ago here say that now 'winbind use default domain
Yes' works as expected, eg in a multidomain/forest environment, permit to
not add the 'defauklt0 domain.

Clearly i've tried to use also the domainful version, with the same result.


Simply i'm no able to have listed with 'id SUBA\a' the foreig
domains; if i
add 'winbind expand groups = 5' i can list users in foreign group, but
not
the converse.

-- 
  Se Darl McBride [il presidente di SCO] ne fosse incaricato,
  probabilmente renderebbe anticostituzionale anche il matrimonio, poich?
  chiaramente attenua la normale natura commerciale dell'interazione umana
  ed ? probabilmente un ostacolo importante alla crescita commerciale
  della prostituzione. 					Linus Torvalds