samba - Sep 2018 - Can't access samba because "session setup failed: NT_STATUS_INVALID_SID"

The ldap server is used for some other web services of the institution like
to log in GItlab, Redmine etc. Also, used to log in Linux machines of the
labs.
What would be the solution for that case?

Em dom, 30 de set de 2018 às 18:43, Rowland Penny via samba <
samba at lists.samba.org> escreveu:
> On Sun, 30 Sep 2018 18:28:42 +0000
> Junior Oliveira <emersonjr.eng at gmail.com> wrote:
>
> > Thanks Rowland,
> >
> > I didn't think i was doing all of this in an outdated way (it
really
> > makes sense, as much of the tutorials i've followed come from
before
> > 2010 and there's barely no  recent tutorials regarding these
issues).
> >
> > So i'm gonna follow your suggestion. However, how can i deal with
the
> > LDAP server? This base is big and it's a mandatory feature i need
to
> > implement on this Samba 4, let the users log in on Samba 4 using
it's
> > credentials from OpenLDAP server. How could i accomplish this now?
> >
> > Thanks in advance again.
> >
>
> Is the ldap server used for anything else, or is it just for Samba ?
> If the latter, then there is always the 'classicupgrade' script,
see
> here for more info:
>
>
>
https://wiki.samba.org/index.php/Migrating_a_Samba_NT4_Domain_to_Samba_AD_(Classic_Upgrade)
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

On Sun, 30 Sep 2018 19:03:08 +0000
Junior Oliveira <emersonjr.eng at gmail.com> wrote:
> The ldap server is used for some other web services of the
> institution like to log in GItlab, Redmine etc. Also, used to log in
> Linux machines of the labs.
> What would be the solution for that case?
> 
Lets deal with the easiest first, the Linux machines, or as we call
them, Unix domain members (aka what I am typing this on), see here:

https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member

You will probably find that you can use kerberos authentication for
everything else.

I don't think you mentioned what OS you are using, but you can get up
to date Debian Samba packages here:

http://apt.van-belle.nl/

Yes, i didn't mention but i'm using Debian, thanks.

I've read the link you've sent but i think i didn't understand.
Sorry if
i'm looking dumb about Samba stuff, but i really am :')  It's my
first time
dealing with Samba.

Just to clarify more, the first thing i should do is configure Samba 4 as
an AD DC, then after this step set up Samba as a Domain Member?

And sorry, but my doubt remains, where is the moment of these settings
where i set the OpenLDAP users data to be used by Samba to log in?

Thanks in advance.

Em dom, 30 de set de 2018 às 19:28, Rowland Penny via samba <
samba at lists.samba.org> escreveu:
> On Sun, 30 Sep 2018 19:03:08 +0000
> Junior Oliveira <emersonjr.eng at gmail.com> wrote:
>
> > The ldap server is used for some other web services of the
> > institution like to log in GItlab, Redmine etc. Also, used to log in
> > Linux machines of the labs.
> > What would be the solution for that case?
> >
>
> Lets deal with the easiest first, the Linux machines, or as we call
> them, Unix domain members (aka what I am typing this on), see here:
>
> https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member
>
> You will probably find that you can use kerberos authentication for
> everything else.
>
> I don't think you mentioned what OS you are using, but you can get up
> to date Debian Samba packages here:
>
> http://apt.van-belle.nl/
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>