[Samba] sssd-ad cannot be installed with sernet samba

buhorojo buhorojo.lcb at gmail.com
Thu Apr 2 04:37:22 MDT 2015

On 02/04/15 12:19, Rowland Penny wrote:
> On 02/04/15 11:05, buhorojo wrote:
>> On 02/04/15 11:27, Rowland Penny wrote:
>>> On 02/04/15 10:20, buhorojo wrote:
>>>> On 02/04/15 08:36, L.P.H. van Belle wrote:
>>>>> nss/winbind does work, yes, there is 1 missing file, just created it.
>>>>> ( and this is not needed on a DC ! )
>>>> So you are telling us that something that returns:
>>>> /bin/false
>>>>  when:
>>>> /bin/bash
>>>> is specified in the database is a piece of software that is working?
>>> You only need a shell if you are logging into the DC and you 
>>> shouldn't be, the samba wiki couldn't be much plainer, it is not 
>>> recommended to use the DC as a fileserver!
>>> However, if you must use the DC as a fileserver, investigate the 
>>> 'template' lines for smb.conf
>>> Rowland
>> The correct output from getent and id goes far beyond login! Please 
>> read previous the posts to the list.
> If you follow the recommendation on the samba wiki and do not use the 
> DC as a fileserver, you will not have this problem. Using the 
> 'template' lines is a workaround, but you still could have problems if 
> you do use the DC as a fileserver.
> Rowland

No, that doesn't help. Forget file-servers and DCs. How else can we 
explain that the output from e.g. getent is wrong? We need the output of 
getent to be correct. So we must use sssd. sssd-ad does not work with 
sernet. There is no fix for that. That's it. Done!

More information about the samba mailing list