[Samba] Samba AD domain member with SSSD: ACL not work

[Rowland Penny]

On Tue, 14 Feb 2017 18:07:33 +0100
Dario Lesca via samba <samba at lists.samba.org> wrote:

> 
> The error still exist
> 
> > You should also try asking on the sssd users mailing list for help,
> > because if you are not using winbind for authentication, this is
> > probably where your problem lies.
> 
> Ok, but my question now is: it's possible to use samba in conjunction
> to sssd? 

Yes

> 
> or this kind of configuration is not allowed or not fully tested or
> supported by samba team?

It is allowed (after all, it is your computer), but is not tested or
supported by Samba, sssd is not part of Samba.

> 
> > If you want use winbind instead of sssd, you will need to turn sssd
> > off.
> 
> Ok, this way it's another possible solution, if I am not able to
> configure samba + sssd

Yes, but as sssd isn't part of Samba, we don't know how to do it.

We do know how to setup winbind, see here:

https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member

Rowland