> The LDAP client is also Fedora 37, Samba client version also 4.17.5; > this host is joined to the Samba AD domain using "realm join ...".>>This is, in my opinion, the wrong way of joining, you should have used >>'net ads join'.>>RowlandHi Rowland, I have noticed several times you have warned against using 'realm join' when that is the method Red Hat wants to use - can you elaborate on why this is an issue for Samba? We only have domain members (no Samba DC) Thanks, Robert Vaughan -- To unsubscribe from this list go to the following URL and read the instructions: https://urldefense.com/v3/__https://lists.samba.org/mailman/options/samba__;!!BlOwZnr7TA!lqE4DX_eaXcM3ZkZfVGtdpuE1clOrVPsGv1pUSHnWJUpW9xsgrLP_i272dhaNFckfEMgArTzs4n9nFfr$ ---------------------------------------------------------------------- This is an e-mail from General Dynamics Land Systems. It is for the intended recipient only and may contain confidential and privileged information. No one else may read, print, store, copy, forward or act in reliance on it or its attachments. If you are not the intended recipient, please return this message to the sender and delete the message and any attachments from your computer. Your cooperation is appreciated.
On 08/02/2023 21:28, Vaughan, Robert J via samba wrote:> > >> The LDAP client is also Fedora 37, Samba client version also 4.17.5; >> this host is joined to the Samba AD domain using "realm join ...". > >>> This is, in my opinion, the wrong way of joining, you should have used >>> 'net ads join'. > >>> Rowland > > Hi Rowland, > > I have noticed several times you have warned against using 'realm join' when that is the method Red Hat wants to use - can you elaborate on why this is an issue for Samba? We only have domain members (no Samba DC) > > Thanks, > > Robert Vaughan > >Realmd, sssd etc were written by red-hat for use against FreeIPA and hence that is what red-hat supports. If you are using Samba, then you should use the method that Samba provides and supports to join computers to a domain. I do not use realm etc, so I cannot provide support, but I have seen reports of joins not working correctly with realm and that sssd can be flaky. Rowland