[Samba] Samba AD domain member with SSSD: ACL not work

Rowland Penny rpenny at samba.org
Tue Feb 14 17:51:50 UTC 2017

On Tue, 14 Feb 2017 18:07:33 +0100
Dario Lesca via samba <samba at lists.samba.org> wrote:

> The error still exist
> > You should also try asking on the sssd users mailing list for help,
> > because if you are not using winbind for authentication, this is
> > probably where your problem lies.
> Ok, but my question now is: it's possible to use samba in conjunction
> to sssd? 


> or this kind of configuration is not allowed or not fully tested or
> supported by samba team?

It is allowed (after all, it is your computer), but is not tested or
supported by Samba, sssd is not part of Samba.

> > If you want use winbind instead of sssd, you will need to turn sssd
> > off.
> Ok, this way it's another possible solution, if I am not able to
> configure samba + sssd

Yes, but as sssd isn't part of Samba, we don't know how to do it.

We do know how to setup winbind, see here:



More information about the samba mailing list