[Samba] user cannot access shares on new ad-dc

[Klaus Hartnegg]

> On 29.09.2017 14:32 Rowland Penny wrote:
> I cannot see where it says not to use on a DC

I misread the first section.

> What does 'getent passwd username' actually produce ?

root at dc1:~# getent passwd administrator
COMPANY\administrator:*:0:100::/home/COMPANY/administrator:/bin/false
root at dc1:~# getent passwd klaus
COMPANY\klaus:*:10000:100::/home/COMPANY/klaus:/bin/false

> if PAM isn't set up, then set it up by installing the
> required packages and try again

Ok, I ran "pam-auth-update" and pressed enter twice.
Have no idea what this does.

But is PAM really necessary on a DC?
The Wiki says that winbindd is optional.
Should not at least sysvol work without it?

Klaus