[Samba] Generating keytab on a read-only file system

Taner Tas taner76 at gmail.com
Fri Dec 28 09:14:52 UTC 2018

> Hmm, i think its good that you read: 
> https://www.freedesktop.org/software/systemd/man/systemd.exec.html 
> Check  ProtectSystem= PrivateTmp=  ReadWritePaths=  
> And basicly the sandboxing part.

I had an opinion about that a systemd based distro won't suit for my
customization needs then I choose Devuan. I'm actually using Devuan
Ascii as nfs root and I already managed sort of things with help of
custom scripts. Because working with SysVinit is much easier than

> # vanbelle repo. 
> echo "deb http://apt.van-belle.nl/debian stretch-samba49 main contrib
> non-free" > /etc/apt/sources.list.d/van-belle.list
> # Enable stretch-backports. 
> echo "deb http://ftp.nl.debian.org/debian stretch-backports main
> contrib non-free" > /etc/apt/sources.list.d/stretch-backports.list
> # Enable testing or SID sources. 
> echo "deb-src http://ftp.nl.debian.org/debian testing main contrib
> non-free" > /etc/apt/sources.list.d/testing.list
> # 
> apt-get update
> apt-get install -t stretch-backports debhelper lintian devscripts
> build-essential fakeroot dh-systemd libdistro-info-perl quilt -y
> apt-get build-dep sssd -y apt-get source sssd -by 
> And wait, until your .deb's are ready. 
> The most simple and quick rebuild of sssd. 
> You need sssd 1.16 (this was 1.15.2) is minimal with the current
> samba versions as far i know. 

Thank you for this guide. I hope you really consider to keep compatible
builds of sssd in your repo.

Taner Tas

More information about the samba mailing list