On 02/04/15 12:41, buhorojo wrote:> On 02/04/15 12:48, Rowland Penny wrote: >> On 02/04/15 11:37, buhorojo wrote: >>> On 02/04/15 12:19, Rowland Penny wrote: >>>> On 02/04/15 11:05, buhorojo wrote: >>>>> On 02/04/15 11:27, Rowland Penny wrote: >>>>>> On 02/04/15 10:20, buhorojo wrote: >>>>>>> On 02/04/15 08:36, L.P.H. van Belle wrote: >>>>>>>> nss/winbind does work, yes, there is 1 missing file, just >>>>>>>> created it. >>>>>>>> ( and this is not needed on a DC ! ) >>>>>>> So you are telling us that something that returns: >>>>>>> /bin/false >>>>>>> when: >>>>>>> /bin/bash >>> >>> >> >> WHERE is the output from getent wrong ? > > Please read the thread. One example is given above. > Thanks. It really doesn't matter;) >OK, I have re-read the thread, I cannot find one example of the errors you get when using samba with the winbind backend, loads of errors when trying to install sssd with sernet packages, but no actual winbind errors. SO, put up or shut up!!! Give an example of an error with using samba from sernet (or debian) with the winbind backend and getent. Rowland
On 02/04/15 14:09, Rowland Penny wrote:> On 02/04/15 12:41, buhorojo wrote: >> On 02/04/15 12:48, Rowland Penny wrote: >>> On 02/04/15 11:37, buhorojo wrote: >>>> On 02/04/15 12:19, Rowland Penny wrote: >>>>> On 02/04/15 11:05, buhorojo wrote: >>>>>> On 02/04/15 11:27, Rowland Penny wrote: >>>>>>> On 02/04/15 10:20, buhorojo wrote: >>>>>>>> On 02/04/15 08:36, L.P.H. van Belle wrote: >>>>>>>>> nss/winbind does work, yes, there is 1 missing file, just >>>>>>>>> created it. >>>>>>>>> ( and this is not needed on a DC ! ) >>>>>>>> So you are telling us that something that returns: >>>>>>>> /bin/false >>>>>>>> when: >>>>>>>> /bin/bash >>>> >>>> >>> >>> WHERE is the output from getent wrong ? >> >> Please read the thread. One example is given above. >> Thanks. It really doesn't matter;) >> > > OK, I have re-read the thread, I cannot find one example of the errors > you get when using samba with the winbind backend, loads of errors > when trying to install sssd with sernet packages, but no actual > winbind errors.Once again: winbind gives /bin/false sssd gives /bin/bash The user has: loginShell: /bin/bash If it doesn't matter for you, don't worry!> > SO, put up or shut up!!! > > Give an example of an error with using samba from sernet (or debian) > with the winbind backend and getent. > > Rowland
On 02/04/15 13:38, buhorojo wrote:> On 02/04/15 14:09, Rowland Penny wrote: >> On 02/04/15 12:41, buhorojo wrote: >>> On 02/04/15 12:48, Rowland Penny wrote: >>>> On 02/04/15 11:37, buhorojo wrote: >>>>> On 02/04/15 12:19, Rowland Penny wrote: >>>>>> On 02/04/15 11:05, buhorojo wrote: >>>>>>> On 02/04/15 11:27, Rowland Penny wrote: >>>>>>>> On 02/04/15 10:20, buhorojo wrote: >>>>>>>>> On 02/04/15 08:36, L.P.H. van Belle wrote: >>>>>>>>>> nss/winbind does work, yes, there is 1 missing file, just >>>>>>>>>> created it. >>>>>>>>>> ( and this is not needed on a DC ! ) >>>>>>>>> So you are telling us that something that returns: >>>>>>>>> /bin/false >>>>>>>>> when: >>>>>>>>> /bin/bash >>>>> >>>>> >>>> >>>> WHERE is the output from getent wrong ? >>> >>> Please read the thread. One example is given above. >>> Thanks. It really doesn't matter;) >>> >> >> OK, I have re-read the thread, I cannot find one example of the >> errors you get when using samba with the winbind backend, loads of >> errors when trying to install sssd with sernet packages, but no >> actual winbind errors. > Once again: > winbind gives /bin/false > sssd gives /bin/bash > The user has: > loginShell: /bin/bash > > If it doesn't matter for you, don't worry! > >That is *NOT* an error, that is the way the winbind built into the samba daemon works, it does not pull anything else from AD other than the users uidNumber and the gidNumber of their primary group. There is a work round involving the 'template' directories that can be set in smb.conf, these affect everybody that connects to the machine it is set on, per user settings cannot be set. It is one of the reasons against using the DC as a file server, but there are others. People have complained about the hard drive filling up until the DC is restarted, there have also been problems with excessive use of memory. I will put it this way, which part of the following statement do you not understand ? *We _do not recommend_ using the Domain Controller as a file Server*. As taken from the DC page on the samba wiki. I have no worries about using windbind, it works for me because I use it as recommended, it would seem that you are the one with the worries. Rowland