[Samba] Unable to ssh to dc

[Rob Campbell]

I can ssh to the dc but only using local accounts. I can ssh to the domain
members using domain or local accounts.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
In all things, Be Intentional.


On Sat, Jun 10, 2023 at 6:14 PM Rob Campbell <robcampbell08105 at gmail.com>
wrote:

> On 10/06/2023 16:39, Rob Campbell via samba wrote:
>> > First question is, should I be able to ssh to the dc?
>>
>> Yes, you should be able to login via SSH
>>
>> > I can ssh to the
>> > domain members and the sshd and ssh configs are set up the same as well
>> as
>> > nsswitch.conf.
>>
>> However, you need to have the winbind nss links set up.
>>
>> Does 'getent passwd newtestuser' produce output ?
>
> It produces nothing.
>
>>
>>
>> Rowland
>
>
> /etc/nsswitch.conf
>  passwd:         files winbind systemd
> group:          files winbind systemd
> shadow:         files
> gshadow:        files
>
> hosts:          files dns
>
> protocols:      db files
> services:       db files #winbind 202306101130
> ethers:         db files
> rpc:            db files
>
>
> /etc/default/winbind:
> # Defaults for winbind initscript
> # sourced by /etc/init.d/winbind
> #
>
> #
> # This is a POSIX shell fragment
> #
>
>
> # Winbind configuration
> #WINBINDD_OPTS="-n"
>
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> In all things, Be Intentional.
>
>
> On Sat, Jun 10, 2023 at 12:21 PM Rowland Penny via samba <
> samba at lists.samba.org> wrote:
>
>>
>>
>> On 10/06/2023 16:39, Rob Campbell via samba wrote:
>> > First question is, should I be able to ssh to the dc?
>>
>> Yes, you should be able to login via SSH
>>
>> > I can ssh to the
>> > domain members and the sshd and ssh configs are set up the same as well
>> as
>> > nsswitch.conf.
>>
>> However, you need to have the winbind nss links set up.
>>
>> Does 'getent passwd newtestuser' produce output ?
>>
>> Rowland
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
>