El 01/04/15 a les 09:02, L.P.H. van Belle ha escrit:> Again.. > switch to debian Jessie, which is fine. yes its testing atm but in a few months it wil be the new stable. > Als long as you dont install to many, you wil be fine, my print server is Debian jessie for about 6 months now..There are too many animals already in my zoo ;-) I reluctantly added ubuntu only because of the LTS part (I'm getting old and tired :-D) Besides, jessie uses systemd........ Bye -- Luca Olivetti Wetron Automation Technology http://www.wetron.es Tel. +34 935883004 Fax +34 935883007
On 01/04/15 08:09, Luca Olivetti wrote:> El 01/04/15 a les 09:02, L.P.H. van Belle ha escrit: > >> Again.. >> switch to debian Jessie, which is fine. yes its testing atm but in a few months it wil be the new stable. >> Als long as you dont install to many, you wil be fine, my print server is Debian jessie for about 6 months now.. > There are too many animals already in my zoo ;-) > I reluctantly added ubuntu only because of the LTS part (I'm getting old > and tired :-D) > Besides, jessie uses systemd........ > > ByeThe Sernet Debian samba packages are a replacement for the Debian samba packages and as such they should work in the same way. Unfortunately (are you listening Sernet) there is a missing file!!!, everything that is the Debian samba packages is in the Sernet Debian packages (just not necessarily in the same package) apart from /usr/share/pam-configs/winbind, without this file, you cannot login. If you decide to use sssd, this will duplicate what winbind does, so it is an add-on, you do not need it, samba will work without it. Finally, it is (at the moment) very very easy to remove systemd from Jessie. From my testing, it is easier to remove systemd than to get a self compiled samba 4.2 to start using systemd. Rowland
L.P.H. van Belle
2015-Apr-01 08:56 UTC
[Samba] sssd-ad cannot be installed with sernet samba
The "missing" file is the following.
Which is a copy of debian's winbind file and this works fine.
here is a copy past..
cat << EOF > /usr/share/pam-configs/sernet-winbind
Name: Sernet-Winbind NT/Active Directory authentication
Default: yes
Priority: 192
Auth-Type: Primary
Conflicts: winbind
Auth:
[success=end default=ignore] pam_winbind.so krb5_auth
krb5_ccache_type=FILE cached_login try_first_pass
Auth-Initial:
[success=end default=ignore] pam_winbind.so krb5_auth
krb5_ccache_type=FILE cached_login
Account-Type: Primary
Account:
[success=end new_authtok_reqd=done default=ignore] pam_winbind.so
Password-Type: Primary
Password:
[success=end default=ignore] pam_winbind.so use_authtok
try_first_pass
Password-Initial:
[success=end default=ignore] pam_winbind.so
Session-Type: Additional
Session:
optional pam_winbind.so
EOF
I'll report it to sernet support.
Greetz,
Louis
>-----Oorspronkelijk bericht-----
>Van: rowlandpenny at googlemail.com
>[mailto:samba-bounces at lists.samba.org] Namens Rowland Penny
>Verzonden: woensdag 1 april 2015 9:53
>Aan: samba at lists.samba.org
>Onderwerp: Re: [Samba] sssd-ad cannot be installed with sernet samba
>
>On 01/04/15 08:09, Luca Olivetti wrote:
>> El 01/04/15 a les 09:02, L.P.H. van Belle ha escrit:
>>
>>> Again..
>>> switch to debian Jessie, which is fine. yes its testing atm
>but in a few months it wil be the new stable.
>>> Als long as you dont install to many, you wil be fine, my
>print server is Debian jessie for about 6 months now..
>> There are too many animals already in my zoo ;-)
>> I reluctantly added ubuntu only because of the LTS part (I'm
>getting old
>> and tired :-D)
>> Besides, jessie uses systemd........
>>
>> Bye
>
>The Sernet Debian samba packages are a replacement for the
>Debian samba
>packages and as such they should work in the same way. Unfortunately
>(are you listening Sernet) there is a missing file!!!, everything that
>is the Debian samba packages is in the Sernet Debian packages
>(just not
>necessarily in the same package) apart from
>/usr/share/pam-configs/winbind, without this file, you cannot login.
>
>If you decide to use sssd, this will duplicate what winbind
>does, so it
>is an add-on, you do not need it, samba will work without it.
>
>Finally, it is (at the moment) very very easy to remove systemd from
>Jessie. From my testing, it is easier to remove systemd than to get a
>self compiled samba 4.2 to start using systemd.
>
>Rowland
>--
>To unsubscribe from this list go to the following URL and read the
>instructions: https://lists.samba.org/mailman/options/samba
>
>
On 01/04/15 09:53, Rowland Penny wrote:> On 01/04/15 08:09, Luca Olivetti wrote: >> El 01/04/15 a les 09:02, L.P.H. van Belle ha escrit: >> >>> Again.. >>> switch to debian Jessie, which is fine. yes its testing atm but in a >>> few months it wil be the new stable. >>> Als long as you dont install to many, you wil be fine, my print >>> server is Debian jessie for about 6 months now.. >> There are too many animals already in my zoo ;-) >> I reluctantly added ubuntu only because of the LTS part (I'm getting old >> and tired :-D) >> Besides, jessie uses systemd........ >> >> Bye > > The Sernet Debian samba packages are a replacement for the Debian > samba packages and as such they should work in the same way. > Unfortunately (are you listening Sernet) there is a missing file!!!, > everything that is the Debian samba packages is in the Sernet Debian > packages (just not necessarily in the same package) apart from > /usr/share/pam-configs/winbind, without this file, you cannot login. > > If you decide to use sssd, this will duplicate what winbind does, so > it is an add-on, you do not need it, samba will work without it.The poster reported that nss doesn't work. Try it. Both getent and id return errors with winbind. That's an error with sernet, not sssd. Many of the questions on this list are about errors with nss. sssd makes those errors go away.> > Finally, it is (at the moment) very very easy to remove systemd from > Jessie. From my testing, it is easier to remove systemd than to get a > self compiled samba 4.2 to start using systemd. > > Rowland