samba - Sep 2018 - Fwd: Having problem with RID backend - must be missing something

On Fri, 14 Sep 2018 18:50:02 -0400 (EDT)
Rich Webb via samba <samba at lists.samba.org> wrote:
> ----- On Sep 14, 2018, at 11:29 AM, Rowland Penny via samba
> samba at lists.samba.org wrote:
> 
> > Perhaps I need to add a note about sssd.
> 
> Not sure what sssd is - I will research.
sssd is red-hats take on winbind (it actually uses some of the winbind
code), but it does more (not that it needs to)
>  
> > Okay, can only speak for debian, but you need the glue that connects
> > Samba to nsswitch (a link to how to set this up was on the domain
> > member page, but it wasn't obvious, hopefully it is now), see
here:
> > 
> > https://wiki.samba.org/index.php/Libnss_winbind_Links
> > 
> 
> Yes, I didn't mention it but I did do this step
Including modifying /etc/nsswitch.conf ?
> 
> > 
> > Do you have sssd installed, if so, make a decision, do you want too
> > use winbind or sssd ?
> > 
> > If sssd, stop using winbind and ignore the link above.
> > If winbind (which I suggest), stop using sssd
> > 
> 
> I do not know the difference - I believe I'm using winbind now with
> the Rid backend.
You would know, if you are sssd in the same way as the winbind 'rid'
backend, you will get very large ID's
> 
> > There is a problem with using Centos as the base OS, you must
> > compile Samba, the default OS Samba packages cannot be used to
> > create a DC
> 
> Yes, that is how I did it - I compiled from source.  
Exactly as per the Samba wiki using Heimdal instead of MIT ?

Rowland

----- On Sep 15, 2018, at 4:32 AM, Rowland Penny via samba samba at
lists.samba.org wrote:
> 
> Including modifying /etc/nsswitch.conf ?
> 
Yep.
>> 
>> Yes, that is how I did it - I compiled from source.
> 
> Exactly as per the Samba wiki using Heimdal instead of MIT ?
> 
Yes - I followed this article: 
https://wiki.samba.org/index.php/Build_Samba_from_Source

I really would prefer to use an RPM build but there doesn't seem to be any
well maintained ones other than SerNet which has decided to charge for their
RPMs now.  I had thought about seeing if someone wanted to help create an RPM
build for CentOS 7 so it would eliminate the need to compile from source to get
an AD DC.  I have never taken on such an endeavor but the experience would
probably be well worthwhile and final product rewarding :)

If you're wondering why I don't use a Debian based build such as Ubuntu
the reason is that I have been burned by their update system too many times. 
Yum (on CentOS) just always works no matter how old your server gets.  It seems
like whenever I used Ubuntu if it got sufficiently out of date apt failed to
bring it up to date listing all kinds of dependency problems - yeah yeah I know
keep your system up to date but sometimes things fall behind.  A package manager
should always be able to update without issue to whatever is current no matter
how old the system.  I have just had much better luck with CentOS in that
regard.

Rich

On Sat, 15 Sep 2018 13:08:20 -0400 (EDT)
Rich Webb via samba <samba at lists.samba.org> wrote:
> ----- On Sep 15, 2018, at 4:32 AM, Rowland Penny via samba
> samba at lists.samba.org wrote:
> 
> > 
> > Including modifying /etc/nsswitch.conf ?
> > 
> 
> Yep.
> 
> >> 
> >> Yes, that is how I did it - I compiled from source.
> > 
> > Exactly as per the Samba wiki using Heimdal instead of MIT ?
> > 
> 
> Yes - I followed this article:
> https://wiki.samba.org/index.php/Build_Samba_from_Source
>
Okay, I was checking if you are using MIT, you aren't, good.
 
> I really would prefer to use an RPM build but there doesn't seem to
> be any well maintained ones other than SerNet which has decided to
> charge for their RPMs now.  I had thought about seeing if someone
> wanted to help create an RPM build for CentOS 7 so it would eliminate
> the need to compile from source to get an AD DC.  I have never taken
> on such an endeavor but the experience would probably be well
> worthwhile and final product rewarding :)
This would indeed be a good idea, even if red-hat get their act
together, mainly because it seems that no distro can keep up with
Samba ;-)
> 
> If you're wondering why I don't use a Debian based build such as
> Ubuntu the reason is that I have been burned by their update system
> too many times.  Yum (on CentOS) just always works no matter how old
> your server gets.  It seems like whenever I used Ubuntu if it got
> sufficiently out of date apt failed to bring it up to date listing
> all kinds of dependency problems - yeah yeah I know keep your system
> up to date but sometimes things fall behind.  A package manager
> should always be able to update without issue to whatever is current
> no matter how old the system.  I have just had much better luck with
> CentOS in that regard.
> 
What distro you choose is up you and you alone. I personally use
Devuan because I find it easy to maintain, but mainly because it
doesn't use systemd. I wouldn't force my distro choice on anybody,
advise its use, yes, force, no.

OK, I will set up latest Centos in a VM and compile & configure
Samba and lets see if I can make it work ;-)

Rowland