As he wrote that SSH and SMTP auth and others stuffs are working, I would say SSSD should work. As he wrote there is an issue with Samba, I'd like to understand how he is using Samba, what is the exact error and what he's doing to get that error. Samba should be able to live with other tools. We should be able to able to speak here about Samba working with other tools. But that certainly is because I'm sometimes radical in what represent open source world to me. 2016-10-12 12:39 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>:> On Wed, 12 Oct 2016 12:31:51 +0200 > mathias dufresne via samba <samba at lists.samba.org> wrote: > > > 2016-10-12 12:17 GMT+02:00 L.P.H. van Belle via samba > > <samba at lists.samba.org > > >: > > > > > Your error. > > > > > > > > dn: uid=102220,ou=User,dc=example,dc=com > > > > > uid: 102220 > > > > > username: test1 > > > > > > Samba normaly set uid=Username and not the uidNumber > > > First find why you have uid=Number and not uid=Username. > > > > > > > > > Greetz, > > > > > > Louis > > > > > > > > > > > I'm puzzled by what you wrote as I'm currently using Samba to get AD > > domain and some of our users are set with "uid" LDAP attribute > > containing numbers (some others are containing string equal to > > sAMAccountName) and all users [seem to] work correctly. > > > > I think he means on an NT4-style domain, but as I pointed out, this has > NOTHING to do with Samba. It is probably a mis-configuration of sssd > and as such, the OP should ask their question on sssd-users. > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >
On Wed, 12 Oct 2016 14:16:12 +0200 mathias dufresne <infractory at gmail.com> wrote:> As he wrote that SSH and SMTP auth and others stuffs are working, I > would say SSSD should work. > As he wrote there is an issue with Samba, I'd like to understand how > he is using Samba, what is the exact error and what he's doing to get > that error. > > Samba should be able to live with other tools. We should be able to > able to speak here about Samba working with other tools. But that > certainly is because I'm sometimes radical in what represent open > source world to me. >I have nothing against sssd, but Samba recommends using winbind instead. This problem is very likely to be an sssd problem, users with numbers instead of names work with winbind: rowland at devstation:~$ getent passwd samdom\\102220 102220:*:10011:10000:102220:/home/102220:/bin/false This is, of course, on AD, but the principal is the same, so the question must be 'why doesn't this work with sssd' and the answer will be 'we do not know, ask sssd' Rowland
As SSSD seems to work with others tools (SSH, SMTP auth...), as the OP doesn't described his error very clearly, I do think you can't say the error is SSSD for sure. You can expect the error is from SSSD, you can even be sure of that. But as this error is not clear, how dare be so sure? For 'we do not know, ask sssd' I'm not included in that "we". When I don't know, most generally I try to learn. 2016-10-12 14:34 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>:> On Wed, 12 Oct 2016 14:16:12 +0200 > mathias dufresne <infractory at gmail.com> wrote: > > > As he wrote that SSH and SMTP auth and others stuffs are working, I > > would say SSSD should work. > > As he wrote there is an issue with Samba, I'd like to understand how > > he is using Samba, what is the exact error and what he's doing to get > > that error. > > > > Samba should be able to live with other tools. We should be able to > > able to speak here about Samba working with other tools. But that > > certainly is because I'm sometimes radical in what represent open > > source world to me. > > > > I have nothing against sssd, but Samba recommends using winbind instead. > > This problem is very likely to be an sssd problem, users with numbers > instead of names work with winbind: > > rowland at devstation:~$ getent passwd samdom\\102220 > 102220:*:10011:10000:102220:/home/102220:/bin/false > > This is, of course, on AD, but the principal is the same, so the > question must be 'why doesn't this work with sssd' and the answer will > be 'we do not know, ask sssd' > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >