[Samba] sssd-ad cannot be installed with sernet samba
L.P.H. van Belle
belle at bazuin.nl
Wed Apr 1 02:56:03 MDT 2015
The "missing" file is the following.
Which is a copy of debian's winbind file and this works fine.
here is a copy past..
cat << EOF > /usr/share/pam-configs/sernet-winbind
Name: Sernet-Winbind NT/Active Directory authentication
[success=end default=ignore] pam_winbind.so krb5_auth krb5_ccache_type=FILE cached_login try_first_pass
[success=end default=ignore] pam_winbind.so krb5_auth krb5_ccache_type=FILE cached_login
[success=end new_authtok_reqd=done default=ignore] pam_winbind.so
[success=end default=ignore] pam_winbind.so use_authtok try_first_pass
[success=end default=ignore] pam_winbind.so
I'll report it to sernet support.
>Van: rowlandpenny at googlemail.com
>[mailto:samba-bounces at lists.samba.org] Namens Rowland Penny
>Verzonden: woensdag 1 april 2015 9:53
>Aan: samba at lists.samba.org
>Onderwerp: Re: [Samba] sssd-ad cannot be installed with sernet samba
>On 01/04/15 08:09, Luca Olivetti wrote:
>> El 01/04/15 a les 09:02, L.P.H. van Belle ha escrit:
>>> switch to debian Jessie, which is fine. yes its testing atm
>but in a few months it wil be the new stable.
>>> Als long as you dont install to many, you wil be fine, my
>print server is Debian jessie for about 6 months now..
>> There are too many animals already in my zoo ;-)
>> I reluctantly added ubuntu only because of the LTS part (I'm
>> and tired :-D)
>> Besides, jessie uses systemd........
>The Sernet Debian samba packages are a replacement for the
>packages and as such they should work in the same way. Unfortunately
>(are you listening Sernet) there is a missing file!!!, everything that
>is the Debian samba packages is in the Sernet Debian packages
>necessarily in the same package) apart from
>/usr/share/pam-configs/winbind, without this file, you cannot login.
>If you decide to use sssd, this will duplicate what winbind
>does, so it
>is an add-on, you do not need it, samba will work without it.
>Finally, it is (at the moment) very very easy to remove systemd from
>Jessie. From my testing, it is easier to remove systemd than to get a
>self compiled samba 4.2 to start using systemd.
>To unsubscribe from this list go to the following URL and read the
More information about the samba