[Samba] How to configure samba to use LDAP/Kerberos authentication without using winbind?
rpenny at samba.org
Sun May 22 08:43:00 UTC 2016
On 22/05/16 05:01, Dewayne Geraghty wrote:
> Rowland, I'm in a similar situation. We use virtual machines on one
> physical host that calls upon AD (mail, squid, ...). nslcd is less
> complex to install/maintain due to lower number of additional
> libraries/packages required, as well as less resource impact.
> Name RSS VSZ No of shared libs
> winbindd 46.9M 84.3M 120
> nslcd 6.8M 35.8M 19
> taken from FreeBSD 10.3
Whilst nslcd appears to use less libs, over 98% of the libs used by
winbindd are also used by smbd (you are using smbd, aren't you? ), so
you may be installing more libs than needed. As for complexity of
install, winbindd uses smb.conf and you will have set this up anyway. To
put it bluntly, if you use nlscd, you are installing and setting it up
to do something that winbind will do very easily.
More information about the samba