[Samba] Problem with Active Directory authentication

Miguel Medalha medalist at sapo.pt
Wed Jun 8 22:38:05 UTC 2016

> (...)  By default a samba AD DC sets the login shell for all
> Active Directory user accounts to /bin/false.  The only way I've found to
> change this, is to override that globally with the "template shell =
> /bin/bash" option in smb.conf, which enables it globally for all Active
> Directory users (probably not desired).

Using RFC2307 you can give each user its own shell and home directory. 
Read here:


More information about the samba mailing list