samba - Apr 2018 - FW: LDAP getent issues

On Sun, 8 Apr 2018 05:55:18 +0000
Praveen Ghimire via samba <samba at lists.samba.org> wrote:
> Hi,
> 
> I've gone through the following link about member server and also the
> samba 3 by example and can confirm that nsdc is not enabled.
> https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member
> 
> 
> We are having some issues with LDAP authentication. Here is  our setup
> 
> 
> Any suggestions?
> 
Hi, I take it you missed my post yesterday, where I agreed with you that
using winbind on a Unix domain member doesn't work for users.

You seem to have two options here, file a bug report about the problem
and then wait to see if it gets fixed, or do the sensible thing and
upgrade to an AD domain.

Rowland

Hi Rowland,

Let me start my apologizing about the missed email, must have not seen it.

We are migrating to an AD domain , the first step was to migrate PDC to LDAP.

So to get around the bug, do we need to create the user in both PDC in LDAP and
also as a local user in the member server with the same password? As the member
server is set to look for files then winbind, this should work?



Regards,

Praveen Ghimire


-------- Original message --------
From: Rowland Penny <rpenny at samba.org>
Date: 8/04/2018 6:15 PM (GMT+10:00)
To: samba at lists.samba.org
Cc: Praveen Ghimire <PGhimire at sundata.com.au>
Subject: Re: [Samba] FW: LDAP getent issues

On Sun, 8 Apr 2018 05:55:18 +0000
Praveen Ghimire via samba <samba at lists.samba.org> wrote:
> Hi,
>
> I've gone through the following link about member server and also the
> samba 3 by example and can confirm that nsdc is not enabled.
> https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member
>
>
> We are having some issues with LDAP authentication. Here is  our setup
>
>
> Any suggestions?
>
Hi, I take it you missed my post yesterday, where I agreed with you that
using winbind on a Unix domain member doesn't work for users.

You seem to have two options here, file a bug report about the problem
and then wait to see if it gets fixed, or do the sensible thing and
upgrade to an AD domain.

Rowland


______________________________________________________________________
This email has been scanned by the Symantec Email Security.cloud service.
For more information please visit http://www.symanteccloud.com
______________________________________________________________________

On Sun, 8 Apr 2018 08:35:24 +0000
Praveen Ghimire <PGhimire at sundata.com.au> wrote:
> Hi Rowland,
> 
> Let me start my apologizing about the missed email, must have not
> seen it.
> 
> We are migrating to an AD domain , the first step was to migrate PDC
> to LDAP.
> 
> So to get around the bug, do we need to create the user in both PDC
> in LDAP and also as a local user in the member server with the same
> password? As the member server is set to look for files then winbind,
> this should work?
> 
> 
If you are migrating to AD, you do not need the Unix domain member to
carry out the migration. You also do not need to migrate to LDAP first.

Have you read this:

https://wiki.samba.org/index.php/Migrating_a_Samba_NT4_Domain_to_Samba_AD_(Classic_Upgrade)

Rowland