[Samba] Security = ADS and uidnumbers

Rowland Penny rpenny at f2s.com
Wed Jun 5 09:55:10 MDT 2013


Oh yes it works ok

on the samba4 server, using winbind
getent passwd user
DOMAIN\user:*:3001106:20513::/home/DOMAIN/user:/bin/bash

uid=3001106(DOMAIN\user) gid=20513(DOMAIN\Domain Users)
groups=20513(DOMAIN\Domain Users),21110(DOMAIN\linuxusers)

change to sssd
getent passwd user
user:*:3001106:20513:user:/home/DOMAIN/user:/bin/bash

id user
uid=3001106(user) gid=20513(Domain Users) groups=20513(Domain
Users),21110(linuxusers)

on the client, using sssd
user:*:3001106:20513:user:/home/DOMAIN/user:/bin/bash

id user
uid=3001106(user) gid=20513(Domain Users) groups=20513(Domain
Users),21110(linuxusers)

As far as I can see, the only difference when you use winbind on the server
is you cannot turn of the displaying the domain name otherwise  the outputs
are identical.


On 5 June 2013 16:22, Jonathan Buzzard <jonathan at buzzard.me.uk> wrote:

> On Wed, 2013-06-05 at 15:42 +0100, Rowland Penny wrote:
> >
> > I never said that I couldn't get it to work, I just said that it is
> > just too complicated. Yes I can read and there was no need to get
> > personal
> >
>
> You said you gave up because it was too complicated. Also if you are
> setting up a Samba file server and need UID/GID to SID mappings the only
> supported option is Winbind if sssd works at all.
>
> JAB.
>
> --
> Jonathan A. Buzzard                 Email: jonathan (at) buzzard.me.uk
> Fife, United Kingdom.
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>


More information about the samba mailing list