El 3/9/18 a les 16:35, Jamie Jackson via samba ha escrit:> I didn't set this up, but I assume the sysadmins didn't run it because > they, like Luca, probably assumed that smbd was for server functionalityI didn't assume, it's the documentation that says so. In fact, the winbindd man page says that the winbind daemon provides services to smbd and ntlm_auth, not the reverse: "Even if winbind is not used for nsswitch, it still provides a service to smbd, ntlm_auth and the pam_winbind.so PAM module" So, according to the documentation, you can run winbindd alone but you cannot run smbd/ntlm_auth without winbindd. Bye -- Luca Olivetti Wetron Automation Technology http://www.wetron.es/ Tel. +34 93 5883004 (Ext.3010) Fax +34 93 5883007
On Mon, 3 Sep 2018 16:45:36 +0200 Luca Olivetti via samba <samba at lists.samba.org> wrote:> El 3/9/18 a les 16:35, Jamie Jackson via samba ha escrit: > > > I didn't set this up, but I assume the sysadmins didn't run it > > because they, like Luca, probably assumed that smbd was for server > > functionality > > I didn't assume, it's the documentation that says so. > In fact, the winbindd man page says that the winbind daemon provides > services to smbd and ntlm_auth, not the reverse: > > "Even if winbind is not used for nsswitch, it still provides a > service to smbd, ntlm_auth and the pam_winbind.so PAM module" > > So, according to the documentation, you can run winbindd alone but > you cannot run smbd/ntlm_auth without winbindd. >Yes, but it depends on how you run Samba. If you run Samba as a standalone server you only need to run 'smbd', but running 'nmbd' as well would be a good idea. If you run Samba as a PDC or BDC, the same as a standalone server goes. Anything else needs both smbd and winbind running. Rowland
El 3/9/18 a les 17:13, Rowland Penny via samba ha escrit:> Yes, but it depends on how you run Samba. If you run Samba as a > standalone server you only need to run 'smbd', but running 'nmbd' as > well would be a good idea. > > If you run Samba as a PDC or BDC, the same as a standalone server goes. > > Anything else needs both smbd and winbind running.It doesn't make sense: 1) why should I need to run smbd if I'm not providing cifs services to other computers? 2) why does winbindd work for many days even with smbd not running? Shouldn't it just barf at startup or after a short wait if it really needs smbd? In any case I prefer my plaster instead of running a service that I don't need and could open the server to several vulnerabilities. Bye -- Luca Olivetti Wetron Automation Technology http://www.wetron.es/ Tel. +34 93 5883004 (Ext.3010) Fax +34 93 5883007