[Samba] sssd not a good idea

[Rowland penny]

On 12/06/2019 16:31, Goetz, Patrick G via samba wrote:
>
> On 6/12/19 7:00 AM, Rowland penny wrote:
>> Until yesterday I would have pointed you at the sssd-users mailing list, that was until I found this:
>> *Important*
>> Red Hat only supports running Samba as a server with the |winbindd| service to provide domain users and groups to the local system. Due to certain limitations, such as missing Windows access control list (ACL) support and NT LAN Manager (NTLM) fallback, the System Security Services Daemon (SSSD) is not supported.
>> Samba does not support sssd because it cannot, it doesn't produce it. It now seems that red-hat doesn't support using sssd with Samba either, so you are on your own here.
>
> Hi Rowland -
>
> Do you have a link for this comment?  I tried looking it up in the
> current RHEL documentation, and couldn't find it.  I'm guessing this
> might be out of date?  For example, I know nothing of any NTLM fallback.
>
>
>
>
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/system_administrators_guide/ch-file_and_print_servers