On 2/2/23 12:23, cYuSeDfZfb cYuSeDfZfb wrote:> Thanks for the useful parameter. I implemented it in my samba config, > but the script is never called from samba, instead the logon is denied > with NT_STATUS_NO_SUCH_USER.the exact mechanics escape my mind, but I noticed that in one place where we hook the script we only do it if winbindd is *not* runnning. So since you're running Samba as a standalone server, running without winbindd might work to some extent. Alternative iirc the script is also called if you run pdedit or smbpasswd. -slow -- Ralph Boehme, Samba Team https://samba.org/ SerNet Samba Team Lead https://sernet.de/en/team-samba -------------- next part -------------- A non-text attachment was scrubbed... Name: OpenPGP_signature Type: application/pgp-signature Size: 840 bytes Desc: OpenPGP digital signature URL: <http://lists.samba.org/pipermail/samba/attachments/20230202/d8f797db/OpenPGP_signature.sig>
cYuSeDfZfb cYuSeDfZfb
2023-Feb-02 13:39 UTC
[Samba] winbind for nsswitch, without AD membership
Hi, Winbind is not installed and not running, so that's not it. Anyway, guess we'll have to live with the double user creation. Thanks for the quick help, Ralph and Rowland. On Thu, 2 Feb 2023 at 13:47, Ralph Boehme <slow at samba.org> wrote:> > On 2/2/23 12:23, cYuSeDfZfb cYuSeDfZfb wrote: > > Thanks for the useful parameter. I implemented it in my samba config, > > but the script is never called from samba, instead the logon is denied > > with NT_STATUS_NO_SUCH_USER. > > the exact mechanics escape my mind, but I noticed that in one place > where we hook the script we only do it if winbindd is *not* runnning. So > since you're running Samba as a standalone server, running without > winbindd might work to some extent. > > Alternative iirc the script is also called if you run pdedit or smbpasswd. > > -slow > > -- > Ralph Boehme, Samba Team https://samba.org/ > SerNet Samba Team Lead https://sernet.de/en/team-samba >