[Samba] Fwd: Re: Fwd: Re: Kerberos and NTLMv2 authentication

[Edouard Guigné]

On my linux box (centos 7), I set Samba + Winbind against AD.
But I also set SSSD against AD for an other purpose (sftp access).

I am wondering if there is no risk to disable sftpd/sssd if I add 
winbind in /etc/nsswitch.conf

Can Winbind and SSSD be installed on the same system if they are not 
used for the same purpose ?



Le 17/06/2019 à 13:58, Rowland penny via samba a écrit :
> On 17/06/2019 17:45, Edouard Guigné via samba wrote:
>> Hello,
>>
>> I do not know how should be nsswitch.conf configured.
>> What should I change in it according to "/you either do not have the 
>> passwd, group and shadow lines or you have chosen not to show them/" ?
>> Something like this  added to nsswitch.conf ?
>> passwd : files
>> group : files
>> shadow : files
>>
>> What does it change if not to show them ?
>
> If you do not have them set in /etc/nsswitch.conf, then NSS will not 
> use them and if you set them as your example, only the local files 
> will be used, nothing from AD. Try it like this:
>
> passwd:         files winbind
> group:          files winbind
> shadow:         files
> gshadow:        files
>
> hosts:          files dns
>
> bootparams: nisplus [NOTFOUND=return] files
>
> ethers:     files
> netmasks:   files
> networks:   files
> protocols:  files
> rpc:        files
> services:   files
>
> netgroup:   files
>
> publickey:  nisplus
>
> automount:  files
> aliases:    files nisplus
>
> Rowland
>
>
>