[Samba] Fwd: Having problem with RID backend - must be missing something

[Rowland Penny]

On Sat, 15 Sep 2018 19:00:10 +0100
Rowland Penny via samba <samba at lists.samba.org> wrote:

> On Sat, 15 Sep 2018 13:08:20 -0400 (EDT)
> Rich Webb via samba <samba at lists.samba.org> wrote:
> 
> > ----- On Sep 15, 2018, at 4:32 AM, Rowland Penny via samba
> > samba at lists.samba.org wrote:
> > 
> > > 
> > > Including modifying /etc/nsswitch.conf ?
> > > 
> > 
> > Yep.
> > 
> > >> 
> > >> Yes, that is how I did it - I compiled from source.
> > > 
> > > Exactly as per the Samba wiki using Heimdal instead of MIT ?
> > > 
> > 
> > Yes - I followed this article:
> > https://wiki.samba.org/index.php/Build_Samba_from_Source
> >
> 
> Okay, I was checking if you are using MIT, you aren't, good.
>  
> > I really would prefer to use an RPM build but there doesn't seem to
> > be any well maintained ones other than SerNet which has decided to
> > charge for their RPMs now.  I had thought about seeing if someone
> > wanted to help create an RPM build for CentOS 7 so it would
> > eliminate the need to compile from source to get an AD DC.  I have
> > never taken on such an endeavor but the experience would probably
> > be well worthwhile and final product rewarding :)
> 
> This would indeed be a good idea, even if red-hat get their act
> together, mainly because it seems that no distro can keep up with
> Samba ;-)
> 
> > 
> > If you're wondering why I don't use a Debian based build such as
> > Ubuntu the reason is that I have been burned by their update system
> > too many times.  Yum (on CentOS) just always works no matter how old
> > your server gets.  It seems like whenever I used Ubuntu if it got
> > sufficiently out of date apt failed to bring it up to date listing
> > all kinds of dependency problems - yeah yeah I know keep your system
> > up to date but sometimes things fall behind.  A package manager
> > should always be able to update without issue to whatever is current
> > no matter how old the system.  I have just had much better luck with
> > CentOS in that regard.
> > 
> 
> What distro you choose is up you and you alone. I personally use
> Devuan because I find it easy to maintain, but mainly because it
> doesn't use systemd. I wouldn't force my distro choice on anybody,
> advise its use, yes, force, no.
> 
> OK, I will set up latest Centos in a VM and compile & configure
> Samba and lets see if I can make it work ;-)
> 
> Rowland
>    
> 
> 

OK, I now have Samba running on a Centos 7 VM and I am having the same
problem as the OP, I get asked for a password, whilst if I connect to
a Devuan Samba server, I get connected without the password. I have
setup Centos exactly as the Devuan except for PAM, which is totally
different from Devuan.

Devuan uses pam-auth-update, which works with Samba being
in /usr/local/samba and only changes files in /etc/pam.d.

Centos uses authconfig, which seems not to work with Samba being
in /usr/local/samba and wants to change multiple files.

Lets see if I can sort out Centos PAM ;-)

Rowland