[Samba] Linux Workstation x SMB4 DC

Rowland Penny
2015-07-31T18:20:01Z

On 31/07/15 18:53, Denis Cardon wrote:
> Hi Jefferson,
>
> Le 31/07/2015 15:22, Jefferson B. Limeira a écrit :
>> What is the best way to authenticate users in SMB4 DC on Linux
>> workstation?
>> I'm using pam_winbind, but sometimes its very slow...
>
> Configuring everything correctly on the workstation side is quite
> tricky. If you have laptops among your workstations, you'll have to
> deal with caching credentials, groups, users, sid mappings, and so on.
> Otherwise it will be a PITA when network connection to the DC is not
> available.
>
> PAM and NSSwitch are very tricky beasts to tame properly! Currently,
> I'd say that the easiest way of dealing with all those tricky thing is
> to use the pbis from Powerbroker :
>
> http://www.powerbrokeropen.org/
>
> Cheers,
>
> Denis
>

Why put another layer on top of winbind ?

PAM is only tricky to setup if you *don't* use the OS tools, authconfig
on red hat, just installing the various pam packages on debian.

Do you by any chance have enumeration turned on in smb.conf ?

Rowland