[Samba] sssd-ad cannot be installed with sernet samba

[Andrey Repin]

Greetings, Rowland Penny!

>> Once again:
>> winbind gives /bin/false
>> sssd gives /bin/bash
>> The user has:
>> loginShell: /bin/bash
>>
>> If it doesn't matter for you, don't worry!
>>
>>

> That is *NOT* an error,

NSS backend outright lying to the user is not a bug?
What is it then? A butterfly?
You're making so little sense, I begin to doubt your qualification.

> that is the way the winbind built into the samba
> daemon works, it does not pull anything else from AD other than the 
> users uidNumber and the gidNumber of their primary group.
> There is a work round involving the 'template' directories that can be 
> set in smb.conf, these affect everybody that connects to the machine it 
> is set on, per user settings cannot be set.

That is a direct contradiction to the very idea of having a single
authoritative user management database.
Or, if you like, I can compress the previous phrase into one word, starting
with "b".

> It is one of the reasons against using the DC as a file server,

How's setting winbind on a member server would alter the outcome?

> but there are others. People have complained about the hard drive filling up
> until the DC is restarted, there have also been problems with excessive 
> use of memory.

That's clearly indicate bugs breeding and multiplying in the application.
Instead of telling people "oh, just don't do it", why not fix the bugs?

> I will put it this way, which part of the following statement do you not 
> understand ?

> *We _do not recommend_ using the Domain Controller as a file Server*.

So, you are recommending to not use domain controller at all, I got it right?
Because a system that does nothing at all, just sitting there and grinning,
is an useless junk and should be discarded as soon as possible.

> As taken from the DC page on the samba wiki.

> I have no worries about using windbind, it works for me because I use it 
> as recommended, it would seem that you are the one with the worries.

So, you are not using your linux servers for terminal access?
SSH/SFTP/Git/whatever?
That explains your ignorance.


-- 
With best regards,
Andrey Repin
Thursday, April 2, 2015 20:04:41

Sorry for my terrible english...