search for: windows_integration_guid

Hello, I am reading RHEL 7 docs concerning samba integration, and I found https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html-single/windows_integration_guide/index#winbind "4.2.4. Switching Between SSSD and Winbind for SMB Share Access This procedure describes how you can switch between SSSD and Winbind plug-ins that are used for accessing SMB shares from SSSD clients. " Who is responsible for the developpement of the "Winbind plug-in...

Hello -- We are running CentOS 7.2 on a virtual machine, and we are trying to set up LDAP authentication. The ldap packages that are currently installed on the system are the following: python-sss 1.13.0-40.el7_2.4 python-sssdconfig 1.13.0-40.el7_2.4 sssd 1.13.0-40.el7_2.4 sssd-ad 1.13.0-40.el7_2.4 sssd-client 1.13.0-40.el7_2.4 sssd-common 1.13.0-40.el7_2.4 sssd-common-pac 1.13.0-40.el7_2.4

...t user list from AD using "getent passwd <username>". The samba servers starts but i am unable to get the authentication working. I referred the samba dos for centos7 and also installed sssd-libwbclient. https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Windows_Integration_Guide/sssd-ad-integration.html Any pointers would be appreciated. thanks :) OS: Centos: 7.2.1511 (Core) Samba version: 4.2.10 sssd version: 1.13.0 Below are the files sssd.conf ------------------ [sssd] services = nss, pam, pac config_file_version = 2 domains = xx.xxx.com [nss] allowed_shells = /...

...e to show. I don’t remember why this was causing me problems… just that this was the main reason. At the time, I found that the documentation for integrating AD with Linux was best documented… in particular at RedHat: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/windows_integration_guide/summary-direct <https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/windows_integration_guide/summary-direct> They give further reasons for choosing SSSD over Winbind in that document. Cheers, Luc. > On May 14, 2019, at 8:13 AM, Rowland penny via samba <sam...

...rname>". >> The samba servers starts but i am unable to get the authentication >> working. >> >> I referred the samba dos for centos7 and also installed sssd-libwbclient. >> >> https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Windows_Integration_Guide/sssd-ad-integration.html >> >> Any pointers would be appreciated. thanks :) >> > > Yes, try asking on the sssd mailing list, they should be able to give you > better help than here, sssd has nothing to do with Samba. > If you want to use winbind instead, then this is...

...19 ? 13:32, Rowland penny via samba a ?crit?: > On 20/06/2019 17:19, Edouard Guign? via samba wrote: >> Hello, >> >> I am reading RHEL 7 docs concerning samba integration, and I found >> https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html-single/windows_integration_guide/index#winbind >> >> >> "4.2.4. Switching Between SSSD and Winbind for SMB Share Access >> This procedure describes how you can switch between SSSD and Winbind >> plug-ins that are used for accessing SMB shares from SSSD clients. " >> >> Who is...

...figure the dhcp client software to upgrade the dns > records in AD ? > > Rowland I can't discuss the most recent time I dealt with this. The time before *that*, I walked my way through Red Hat's notes at https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/windows_integration_guide/sssd-dyndns .Doing it through sssd is... well it's overkill. The time before *that*, I got the AD administrator to allow "non-secure DNS updates" that were compatible with the RHEL 5 systems I was dealing with. That wasn't ideal, but I was having enough difficulty negotiating con...

...s the DNS records for all the domain members updated. Second is where the client triggers the DNS record update when there is a change. It looks like this is exactly what the dyndns_update feature of sssd is meant to be. https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/windows_integration_guide/sssd-dyndns However, I don't see a similar feature advertised for winbind. I did some more digging into this. Downloaded the sssd codebase ( https://pagure.io/SSSD/sssd.git). It looks like a background task is triggered if this config option is set, which keeps checking and syncing with the d...

That's clearly a documentation bug. As for the samba integration, it's now in its own guide: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/windows_integration_guide/index (this is what I followed on 7.5/7.6 to consume realmd). Let me open a BZ about this... Regards, Vincent On Wed, 12 Jun 2019, Rowland penny via samba wrote: > On 12/06/2019 16:31, Goetz, Patrick G via samba wrote: >> >> On 6/12/19 7:00 AM, Rowland penny wrote: >>>...

I've gotten pretty unhappy with "realmd" and "sssd". They try to hide >> a lot of steps away from the user, but the internal interactions are a >> bit of a "mousetrap" game. When it works, you get the mouse. But if >> any of the many steps are even slightly worn, it becomes erratic or >> fails. >> > > > Update: In fact i

...es/default/files/attachments/rhel-ad-integration-deployment-guidelines-v1.5.pdf SSSD is really the way to go if you're running Centos 7, take a look at "Red Hat Enterprise Linux 7 Windows Integration Guide": https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/pdf/Windows_Integration_Guide/Red_Hat_Enterprise_Linux-7-Windows_Integration_Guide-en-US.pdf Below is my documentation on how to attach a RHEL/CentOS system to an Active Directory Domain using Samba/Kerberos/Winbind. This configuration will allow you to provide SMB file sharing and SSH logins for users in your AD domain. Note...

...k for you, then your smb.conf was mis-configured. > >> >> At the time, I found that the documentation for integrating AD with >> Linux was best documented… in particular at RedHat: >> >> https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/windows_integration_guide/summary-direct >> >> >> They give further reasons for choosing SSSD over Winbind in that >> document. >> > That just basically says 'Hey, use our product', it doesn't really say > why and just how sssd is better than winbind. I avoid SSSD discuss...

I have another samba server and upgraded it to samba4. testparm returns clean with the old config (ROLE_DOMAIN_PDC) and starts up fine. smbclient seems to work fine. The next thing now is to try and make it a domain member so it can auth against AD. Thanks, Andrew, I appreciate the pointers.

...rit?: >>> On 20/06/2019 17:19, Edouard Guign? via samba wrote: >>>> Hello, >>>> >>>> I am reading RHEL 7 docs concerning samba integration, and I found >>>> https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html-single/windows_integration_guide/index#winbind >>>> >>>> >>>> "4.2.4. Switching Between SSSD and Winbind for SMB Share Access >>>> This procedure describes how you can switch between SSSD and >>>> Winbind plug-ins that are used for accessing SMB shares from SSSD...

I find the passwd, shadow and group lines in my CentOS 7 /etc/nsswitch.conf file specify "files sss". I'm not familiar with the "sss" source, would someone please give me an idea what that is? Many thanks....Nick

...mba servers starts but i am unable to get the authentication >>> working. >>> >>> I referred the samba dos for centos7 and also installed >>> sssd-libwbclient. >>> >>> https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Windows_Integration_Guide/sssd-ad-integration.html >>> >>> Any pointers would be appreciated. thanks :) >>> >> >> Yes, try asking on the sssd mailing list, they should be able to give you >> better help than here, sssd has nothing to do with Samba. >> If you want to use wi...

...a provided module) instead of winbind and is using its GPO support [1], those Linux clients must be reading sysvol, but not in a direct way in in which 'acl_xattr:ignore system acls = yes' can affect them [1] https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/windows_integration_guide/sssd-gpo > Rowland >

...... If it didn't work for you, then your smb.conf was mis-configured. > > At the time, I found that the documentation for integrating AD with > Linux was best documented… in particular at RedHat: > > https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/windows_integration_guide/summary-direct > > They give further reasons for choosing SSSD over Winbind in that document. > That just basically says 'Hey, use our product', it doesn't really say why and just how sssd is better than winbind. You do not need either sssd or realmd, just about the only thi...

...my own desert places. - Robert Frost On Wed, 12 Jun 2019, Vincent S. Cojot via samba wrote: > > That's clearly a documentation bug. As for the samba integration, it's now in > its own guide: > https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/windows_integration_guide/index > (this is what I followed on 7.5/7.6 to consume realmd). > Let me open a BZ about this... > > Regards, > > Vincent > > On Wed, 12 Jun 2019, Rowland penny via samba wrote: > >> On 12/06/2019 16:31, Goetz, Patrick G via samba wrote: >>> >>>...

...penny via samba a ?crit?: >> On 20/06/2019 17:19, Edouard Guign? via samba wrote: >>> Hello, >>> >>> I am reading RHEL 7 docs concerning samba integration, and I found >>> https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html-single/windows_integration_guide/index#winbind >>> >>> >>> "4.2.4. Switching Between SSSD and Winbind for SMB Share Access >>> This procedure describes how you can switch between SSSD and Winbind >>> plug-ins that are used for accessing SMB shares from SSSD clients. " >&...