samba - Aug 2020 - Using SSSD + AD with Samba seems to require Winbind be running

On 12/08/2020 14:18, Robert Marcano via samba wrote:
> On 8/12/20 9:11 AM, L.P.H. van Belle via samba wrote:
>> What i dont get/understand ..
>>
>> Why ? Why such setup.
>> Can TP explain this?
>>
>> Just trying to understand you idea why setup like this..
>> There must be a reason?
>>
>
> SSSD provides features that Samba probably will not, like GPO login 
> enforcement, and some it doesn't do yet like automatically define 
> private groups (groups with the same name of the user, I filled a bug 
> for this one)
The GPO one is just about the only thing that sssd does that Samba 
doesn't and you do not need private groups, you want them, but you do 
not need them.
>
> There are meny others but my intention is not to advertice SSSD but 
> help people that need to use it by company policy or by needed features.
Please advertise it somewhere else :D

Rowland

On 8/12/20 9:27 AM, Rowland penny via samba wrote:
> On 12/08/2020 14:18, Robert Marcano via samba wrote:
>> On 8/12/20 9:11 AM, L.P.H. van Belle via samba wrote:
>>> What i dont get/understand ..
>>>
>>> Why ? Why such setup.
>>> Can TP explain this?
>>>
>>> Just trying to understand you idea why setup like this..
>>> There must be a reason?
>>>
>>
>> SSSD provides features that Samba probably will not, like GPO login 
>> enforcement, and some it doesn't do yet like automatically define 
>> private groups (groups with the same name of the user, I filled a bug 
>> for this one)
> The GPO one is just about the only thing that sssd does that Samba 
> doesn't and you do not need private groups, you want them, but you do 
> not need them.
Don't assume what other people need or not.
>>
>> There are meny others but my intention is not to advertice SSSD but 
>> help people that need to use it by company policy or by needed
features.
> 
> Please advertise it somewhere else :D
I helped someone that asked with the big disclaimer about it being a non 
Samba configuration. Maybe I should just unsubscribe :(
> 
> Rowland
> 
> 
> 
>

On 12/08/2020 14:36, Robert Marcano via samba wrote:
>
> Don't assume what other people need or not.
There is a difference between 'need' and 'want'. You
'want' private
groups and are (it would seem) in a minority, You do 'need' them, there 
are ways around this.
>
>>>
>>> There are meny others but my intention is not to advertice SSSD but
>>> help people that need to use it by company policy or by needed 
>>> features.
>>
>> Please advertise it somewhere else :D
>
> I helped someone that asked with the big disclaimer about it being a 
> non Samba configuration. Maybe I should just unsubscribe :(
Never said that. The problem with (if indeed it is a problem) with sssd 
is that Samba does not produce it and we have limited knowledge about it 
and cannot fix any bugs, the correct place to discuss sssd problems is 
on the sssd-users mailing list

Rowland