similar to: Samba 4.4, sssd, adcli; windows hosts cannot authenticate

On Sun, May 28, 2017 at 1:38 AM, Rowland Penny via samba <samba at lists.samba.org> wrote: > On Sat, 27 May 2017 21:45:29 -0700 > Steve Dainard via samba <samba at lists.samba.org> wrote: > >> I'm running samba 4.4.4 on el7. I'm attempting to provide a share >> auth by Kerberos or for non-kerberos hosts auth by password on Linux >> or Windows (7)

On Sat, 27 May 2017 21:45:29 -0700 Steve Dainard via samba <samba at lists.samba.org> wrote: > I'm running samba 4.4.4 on el7. I'm attempting to provide a share > auth by Kerberos or for non-kerberos hosts auth by password on Linux > or Windows (7) > clients. > > We have uid/gid/group memberships in AD and typically configure > Linux hosts with a

> apt remove sssd > apt install winbind I need to disable enumerate AD user and group. With tens of thousands of objects in the AD, this makes login very slow. Another internal team already set up sssd on their OS for years. Me suddenly going to winbind would result in different uid and gid without some hacky idmap. > The smbd daemon cannot talk directly to AD, it requires winbind

On Fri, 12 Jul 2024 22:28:27 +0000 (UTC) Household Cang via samba <samba at lists.samba.org> wrote: > Hello there > > Seeking to serve file shares from AD-joined Debian using sssd and > Kerberos as authentication. No Winbind. Stop right there, I do not know what distro you are using, but if it was Debian, I would be running the following commands: apt remove sssd apt install

Hi all, Configuration information right off the bat: Debian Buster 10.5 and Samba 2:4.9.5+dfsg-5+deb10u1. Testparm is at the bottom I'm running into some interesting behavior on a server I've configured to use SSSD to bind to the AD domain. I've successfully bound using "net ads" and can get tickets and so on, and have samba configured to use kerberos through sssd.

On 12/08/2020 13:24, Robert Marcano via samba wrote: > If you are runnning a Samba server as a member of a domain, you need > to start winbind. The following is a not a Samba issue since Samba and > SSSD interactions are not part of Samba. > > You can still run SSSD/realmd/adcli as your domain membership toolkit, > but you need to start winbind if a Samba server is started on

On 08/06/2019 21:32, Rowland penny via samba wrote: > On 08/06/2019 16:24, Uwe Laverenz via samba wrote: >> Hi all, >> >> when you join a linux server to an active directory with "realm" it >> uses "sssd" as default. This works well as long as you just want to >> be a simple domain member. >> >> As soon as you want a real member

Hello everyone. I joined this list because I cannot find an answer to my problem. The setup is this: I installed CentOS release 6.5 (Final) minimal version Updated all packages Added the server to the Active Directory domain as a member server using the method described here (using adcli, kerberos and sssd): http://jhrozek.livejournal.com/3581.html It worked, I tested by trying to connect through

On 10/06/2019 16:04, vincent at cojot.name wrote: > > There is probably some amount of redtape on this but AFAIK it works > fine for me: My RHEL7.6 hypervisors are joined to my AD DC 4.10.4 VMs > through use of realm '(and thus sssd): > > Here's a RHEL7.6 client: > # realm list > ad.lasthome.solace.krynn > ? type: kerberos > ? realm-name:

What i dont get/understand .. Why ? Why such setup. Can TP explain this? Just trying to understand you idea why setup like this.. There must be a reason? Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland penny via samba > Verzonden: woensdag 12 augustus 2020 14:41 > Aan: samba at lists.samba.org

Would someone please tell me where I can find some good troubleshooting documents to resolve AD authentication issues when using Samba? Is this mailing list the best place? I was able to setup a working WINBIND-Samba setup on CentOS 7.6, but I am required to use SSSD on a different CentOS 7.6 server. Using a test VM, I can get services running, but I can't authenticate from a Mac or

Hello all, I'm kind of pulling my hair out over here. I'll preface this by saying that I'm using the latest version of Samba packaged in Debian Stretch as my domain controller. Currently, I'm trying to build an infrastructure where I can deploy a new virtual machine, then have it automatically join the domain so that users can log in to it without very much (if any)

> > > > On 08/25/2018 03:35 AM, TE Dukes wrote: > > > > Can't say that's what I expected. What about "getent hosts 127.0.0.1"? > > > > > > 127.0.0.1 localhost > > > > OK. /etc/hosts isn't being used. You indicated earlier that you had > > more hostnames in that file. They should show up there. > >

On Wed, 3 Oct 2018 12:45:11 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > Hi folks, > > I have finally nailed down the problem with the non-functional getent > command when using winbind on a samba member server (AD domain). > > The problem was the entry > >    idmap config * : range 3000-9999 No, it wasn't > I used the instructions

On 08/25/2018 03:35 AM, TE Dukes wrote: >> Can't say that's what I expected. What about "getent hosts 127.0.0.1"? > 127.0.0.1 localhost OK.? /etc/hosts isn't being used.? You indicated earlier that you had more hostnames in that file.? They should show up there. Let's go back to pastebin.? What are the contents of /etc/nsswitch.conf and /etc/hosts,

On Wed, 3 Oct 2018 15:16:50 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > > On 10/3/18 1:09 PM, Rowland Penny via samba wrote: > > On Wed, 3 Oct 2018 12:45:11 +0200 > > Peter Milesson via samba <samba at lists.samba.org> wrote: > > > >> Hi folks, > >> > >> I have finally nailed down the problem with the

On Wed, 3 Oct 2018 16:57:07 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > > > On 03.10.2018 15:38, Rowland Penny via samba wrote: > > On Wed, 3 Oct 2018 15:16:50 +0200 > > Peter Milesson via samba <samba at lists.samba.org> wrote: > > > >> On 10/3/18 1:09 PM, Rowland Penny via samba wrote: > >>> On Wed, 3 Oct 2018

I found adcli a little too late; I plan to use it in the future but for the time being I just deployed 16 VMs using Samba so we’re going to keep that for now! Also, the rest of what I wrote can be disregarded – I figured out exactly why my hosts were failing to authenticate after a period of time. It’s too stupid to admit publicly. On 8/23/16, 3:50 PM, "samba on behalf of Kris Lou via

I am trying to run samba with sssd service and AD authentication. I have joined the linux server to the AD domain using realmd and using sssd to authenticate to the AD. I am able to get user list from AD using "getent passwd <username>". The samba servers starts but i am unable to get the authentication working. I referred the samba dos for centos7 and also installed

> > There is no one supporting the use of sssd with Samba, not even Red Hat. > > Now that I know what to look for (thank you, Roland!), I found https://access.redhat.com/solutions/3802321 page explaining how to properly bridge between SSSD and winbind. In essence, the following configuration is in place (copy-pasting main parts of the document for the benefit of those who has no RHEL