[Samba] Login with domain account on dc

[Tim]

I will give sssd a try.

The wiki tells about using a machine account for the keytab. What happens when the password expires? What will happen to the keytab?

@Rowland:
I'd like to use central accounts for the same tasks on all servers. This will make things easier.

Am 21. Februar 2015 21:55:30 MEZ, schrieb Marc Muehlfeld <mmuehlfeld at samba.org>:
>Hello Tim,
>
>Am 21.02.2015 um 21:10 schrieb Tim:
>> on my member server it is no problem to login with a domain
>> account because I have set winbind use default domain = yes.
>> 
>> But how to do this on a DC? It doesn't matter if winbind
>> use default domain = yes is set. So can I do this?
>> E.g. by using su command?
>
>Because winbind isn't started per default and there are some problems
>with it at the moment. Alternatives:
>
>sssd:
>https://wiki.samba.org/index.php/Local_user_management_and_authentication/sssd
>
>nlscd:
>https://wiki.samba.org/index.php/Local_user_management_and_authentication/nslcd
>
>
>Regards,
>Marc