I can ssh to the dc but only using local accounts. I can ssh to the domain
members using domain or local accounts.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
In all things, Be Intentional.
On Sat, Jun 10, 2023 at 6:14?PM Rob Campbell <robcampbell08105 at
gmail.com>
wrote:
> On 10/06/2023 16:39, Rob Campbell via samba wrote:
>> > First question is, should I be able to ssh to the dc?
>>
>> Yes, you should be able to login via SSH
>>
>> > I can ssh to the
>> > domain members and the sshd and ssh configs are set up the same as
well
>> as
>> > nsswitch.conf.
>>
>> However, you need to have the winbind nss links set up.
>>
>> Does 'getent passwd newtestuser' produce output ?
>
> It produces nothing.
>
>>
>>
>> Rowland
>
>
> /etc/nsswitch.conf
> passwd: files winbind systemd
> group: files winbind systemd
> shadow: files
> gshadow: files
>
> hosts: files dns
>
> protocols: db files
> services: db files #winbind 202306101130
> ethers: db files
> rpc: db files
>
>
> /etc/default/winbind:
> # Defaults for winbind initscript
> # sourced by /etc/init.d/winbind
> #
>
> #
> # This is a POSIX shell fragment
> #
>
>
> # Winbind configuration
> #WINBINDD_OPTS="-n"
>
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> In all things, Be Intentional.
>
>
> On Sat, Jun 10, 2023 at 12:21?PM Rowland Penny via samba <
> samba at lists.samba.org> wrote:
>
>>
>>
>> On 10/06/2023 16:39, Rob Campbell via samba wrote:
>> > First question is, should I be able to ssh to the dc?
>>
>> Yes, you should be able to login via SSH
>>
>> > I can ssh to the
>> > domain members and the sshd and ssh configs are set up the same as
well
>> as
>> > nsswitch.conf.
>>
>> However, you need to have the winbind nss links set up.
>>
>> Does 'getent passwd newtestuser' produce output ?
>>
>> Rowland
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions: https://lists.samba.org/mailman/options/samba
>>
>