[Samba] pam_winbind fails to authenticate domain users on my debian wheezy domain member servers

[L.P.H. van Belle]

sssd is in debian sid, as is samba 4.1.3 

remove the sernet packages if you need sssd. 
sernet and sssd does NOT work ! ( yet )

get the sources and rebuild them for wheezy, its about 1/2 hour work.  
some tips how to do this.

1) add the sid sources to /etc/apt/sources.list.d/sid.list  !! ONLY the deb-src * 
	*( You dont want mix sid and stable ) 
	* yes we do mix it, but compiled against the stable packages.
	  this way you dont get unwanted, sid packages, which can break your system.

2a) apt-get source sssd 
2b) apt-get source samba 
3a) apt-get build-dep sssd  
3b) apt-get build-dep samba  
if your missing dependecies, get the source also in the same way. 

install the needed packages you just build. dpkg -i package.deb 
when all dependecies are installed 
apt-get source sssd -b 
apt-get source samba -b

-b = get source and build. 

add a local directory to apt. 
look here. 
http://linuxwave.blogspot.nl/2009/04/adding-local-directory-to-apt.html 
if dpkg-scanpackages  doesnt work, apt-get install dpkg-dev 

good luck. 

Louis


>-----Oorspronkelijk bericht-----
>Van: peter.schaefer at gmx.de 
>[mailto:samba-bounces at lists.samba.org] Namens Peter Schaefer
>Verzonden: woensdag 8 januari 2014 20:36
>Aan: samba at lists.samba.org
>Onderwerp: Re: [Samba] pam_winbind fails to authenticate 
>domain users on my debian wheezy domain member servers
>
>Am 1/8/2014 11:41 AM, Rowland Penny wrote:
>> Hi, just to say that I set up debian wheezy in a VM and then 
>setup sernet-samba as the OP did and I could not get 
>> winbind to work, I tried everything that I could think of 
>but to no avail. I then tried to install sssd instead, but 
>> it would seem that if you are using the sernet samba 
>packages you cannot install sssd. So, at risk of upsetting 
>> Sernet, I cannot recommend their packages at all until they 
>stop naming them sernet-*. 
>
>What makes you think of that? I'm running these just fine:
>
>ii  sernet-samba                          99:4.1.3-7
>ii  sernet-samba-ad                       99:4.1.3-7
>ii  sernet-samba-client                   99:4.1.3-7
>ii  sernet-samba-common                   99:4.1.3-7
>ii  sernet-samba-libs:amd64               99:4.1.3-7
>ii  sernet-samba-libsmbclient0:amd64      99:4.1.3-7
>ii  sernet-samba-winbind                  99:4.1.3-7
>
>ii  sssd                                  1.8.4-2
>ii  sssd-tools                            1.8.4-2
>
>> But all is not lost, Ubuntu 14.04 will have sssd 1.11.3 and, 
>at the moment, Samba 4.0.13 and with a bit of luck will 
>> get Samba 4.1.3 (this is in Jessie now). so with 5 years of 
>updates, this will make a better platform than Debian Wheezy.
>
>I won't hold my breath. Ubuntu LTS guarantees timely security 
>updates only for packages in "main" and "restricted"; 
>packages in other suites rely on "community" support and many 
>of them have a bad track record regarding this, 
>unfortunately. Samba generally is in "main", but sssd is only 
>in "universe", AFAIK.
>
>Regards,
>   Peter
>
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba
>
>