[Samba] Member server guide broken

Ryan Ashley ryana at reachtechfp.com
Thu Aug 14 21:26:50 MDT 2014

I already replied to this and it has yet to be sent out, but I will say 
that I figured out WHY the member server guide is broken and I can prove 
it. Follow along and READ MY POST before being rude again. I have taken 
all of the sarcasm and insults without responding but I am reaching my 
limit. I am not some child who doesn't know how to read.

The guide for PAM fails because, as can be seen on the build-time 
parameters page, PAM IS NOT BUILT BY DEFAULT. Now, couple that with the 
guide only showing "--with-ads" and "--with-shared-modules=idmap_ad", 
and you do not get PAM. As soon as I figured out PAM wasn't being built 
and I built it, I could login after making those changes to my PAM 
files. So i will say it again, THE MEMBER SERVER GUIDE IS BROKEN. Now I 
have the proof. Next time PLEASE try seeing something from the other 
person's perspective BEFORE chewing them out.

To summarize:
PAM modules are not built by default
The guide does not tell you to build PAM modules or even how to do so
Due to this, once you make the changes to your PAM file(s), you can no 
longer login to your system

Now, should I file this as a bug report or do the team members get these 

On 8/14/2014 8:44 PM, Gregory Sloop wrote:
> RA> I have been doing this for a while, and I can now say with certainty
> RA> that the Samba guide for adding a member server is broken
> I've been doing my best to keep my mouth shut, but I'm afraid I'm simply not strong enough. [My name's Greg. I have a "something's wrong on the intenet" problem...]
> It amazes me to hear you claim that anything you've tried in Samba is broken. I suppose there's a chance it is, but you wildly run around throwing every visible switch and madly posting about how you're going to file bug-reports, you can't manage to actually read the man files, and blah, blah, blah.
> But you do things in such a totally haphazard and crazy fashion, with so many bazillion posts, that I'm pretty sure no one, **including you,** actually knows what you've done and haven't. So to then claim there's something wrong with the docs [or Samba] seems awfully rich.
> You've effectively alienated the 2-3 best and most knowledgeable people here [and likely more] and then complain bitterly about how bad the docs are etc.
> You're claiming in prior posts [at least as far as I can tell] that somehow Samba4 is broken in such *basic* ways that it can't even serve files as a member server properly. I might buy some total corner case where something doesn't work as expected. But AD member server with basic file sharing where you want AD groups to control access is broken? You want to claim *that* is broken? Seriously!?!
> How about you just pony up the cash, and pay SerNet for support. If you're able to follow their directions [and I'd guess when you're paying dearly for the privilege you'll actually do so] I'll pretty much guarantee you'll have a properly functioning system.
> Right here:
> http://www.samba.org/samba/support/globalsupport.html
> Sorry Volker...
> But IMO, the probability of you just stumbling across the magic settings that cleans up all the cruft from before, and manages to seemingly randomly flip all the "switches" properly seems like lotto type odds.
> Sheesh.
> Ok, I'll try to hide my eyes again, or gouge them out with spoons, or something...
> -Bye

More information about the samba mailing list