[Samba] Setup a Samba AD DC as an additional DC

Rowland Penny rpenny at samba.org
Thu Nov 29 15:24:36 UTC 2018


On Thu, 29 Nov 2018 16:15:24 +0100
"L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:

> No, there is a simple problem and solution to get id.s
> 
> https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member#Configuring_the_Name_Service_Switch 
> 
> For the member, 
> apt-get install libnss-winbind libpam-winbind
> 
> change /etc/nsswitch.conf 
> passwd:         compat systemd winbind
> group:          compat systemd winbind
> 
> Run pam-auth-update
> And for testing set these to yes in smb.conf 
> winbind enum users  = no
> winbind enum groups = no

ER, why would you add default settings that do nothing ?
Changing 'no' to 'yes' would make sense ;-)

Rowland




More information about the samba mailing list