[Samba] Problem with Active Directory authentication

Kaplan, Andrew H. AHKAPLAN at PARTNERS.ORG
Mon Jun 13 20:42:35 UTC 2016


Hello --

I have made considerable progress. When I am at the server console, I am able to enter my domain username and password, and I am able to log into the server. I had several follow-up questions:

1. How can I configure an SSH connection to the server that will utilize the active directory login?

2. When the login completes, I encounter the following error messages:


Unknown parameter encountered: "netbios"
Ignoring unknown parameter "netbios"
Unknown parameter encountered: "winbind allow trusted domains"
Ignoring unknown parameter "winbind allow trusted domains"

I believe these go back to smb.conf file. The lines in question read as follows:

netbios = <hostname>
...
winbind allow trusted domains = no

I checked the syntax of the two lines within the file, and everything looked fine.

Does anyone have any thoughts on this?

Thanks.
________________________________________
From: samba [samba-bounces at lists.samba.org] on behalf of Rowland penny [rpenny at samba.org]
Sent: Monday, June 13, 2016 11:27 AM
To: samba at lists.samba.org
Subject: Re: [Samba] Problem with Active Directory authentication

On 13/06/16 14:43, Kaplan, Andrew H. wrote:
> Hello --
>
> We are not running a Samba domain controller, rather we are relying on
> our network engineering group. I am not
> sure how willing they are in setting up the NIS extensions feature.
>
> To facilitate matters, would it be better for our either setting up
> the current system as a samba domain contoller,
> or establishing a separate computer that functions exclusively in that
> capacity?
> ------------------------------------------------------------------------
>

If you cannot use the RFC2307 attributes, then you could use the winbind
'rid' backend, see here for more info:

https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member

You will need to follow the relevant link and use the 'template' lines.

Rowland
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


The information in this e-mail is intended only for the person to whom it is
addressed. If you believe this e-mail was sent to you in error and the e-mail
contains patient information, please contact the Partners Compliance HelpLine at
http://www.partners.org/complianceline . If the e-mail was sent to you in error
but does not contain patient information, please contact the sender and properly
dispose of the e-mail.




More information about the samba mailing list