samba - Aug 2021 - Problem connecting Samba and Windows Active Directory

Hi Rowland,

yes I installed sssd, since beginning.
I found a tutorial that says I have to use it.

Is it a problem? Maybe can you help me to configure the system correctly?
On the "old" Debian 10 we don't use sssd, but winbind, but the
same configuration on Debian 11 didn't worked.

Thanks
Luca

-----Urspr?ngliche Nachricht-----
Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Rowland Penny
via samba
Gesendet: Mittwoch, 25. August 2021 14:00
An: samba at lists.samba.org
Betreff: Re: [Samba] Problem connecting Samba and Windows Active Directory

On Wed, 2021-08-25 at 11:23 +0000, Luca Bertoncello via samba
wrote:
> Hi Louis,
> 
> Attached the result file.
> The script say this, too:
> 
> root at nasmedia02:/etc/samba# /tmp/samba-collect-debug-info.sh Please 
> wait, collecting debug info.
>  
> Password for Administrator at AD.QUEO.ORG: 
> Load smb config files from /etc/samba/smb.conf Loaded services file 
> OK.
> Weak crypto is allowed
> Server role: ROLE_DOMAIN_MEMBER
> 
> The debug info about your system can be found in this file:
> /tmp/samba-debug-info.txt
> Please check this and if required, sanitise it.
> Then copy & paste it into an  email to the samba list Do not attach it 
> to the email, the Samba mailing list strips attachments.
> 
You appear to be using sssd instead of winbind, have you installed
winbind and removed sssd ?

Rowland



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

On Wed, 2021-08-25 at 12:05 +0000, Luca Bertoncello via samba
wrote:
> Hi Rowland,
> 
> yes I installed sssd, since beginning.
> I found a tutorial that says I have to use it.
Samba (or anyone else) doesn't support sssd on a Unix domain member
running as a fileserver.
> 
> Is it a problem? 
Yes.
> Maybe can you help me to configure the system correctly?
You are mostly there:

apt purge sssd realmd

Remove all 'sss' from /etc/nsswitch.conf and make the passwd & group
lines look like this:

passwd:         compat winbind systemd
group:          compat winbind systemd
> On the "old" Debian 10 we don't use sssd, but winbind, but
the same
> configuration on Debian 11 didn't worked.
It wouldn't because of sssd

Rowland