[Samba] Authentication with trusted credentials
yrevyakin at gmail.com
Fri Jul 17 04:56:06 UTC 2020
I only tried sssd looking for the cause of the problem.
I use samba, winbind.
On Fri, 17 Jul 2020 at 00:19, Rowland penny via samba <samba at lists.samba.org>
> On 16/07/2020 22:13, Yakov Revyakin wrote:
> > Thank you! I have food for tomorrow. Now I only want to voice some of
> > my considerations.
> > Imagine that a domain had no trusts. At this time a PC became a member
> > of this domain.
> > After some time DC made trust with another domain. In this case
> > existing members don't consider any extra configuration like adding
> > knowledge about new realm, DNS, etc. Existing configuration already
> > provides means of login and session for a user of a trusted domain.
> > In my case Linux PC was informed about trusting DNS before joining
> > the domain. After setting DNS but before joining the domain I could
> > authenticate users from both trusting and trusted domains with kinit
> > without any modifications in krb5.conf. And it is what I was waiting for.
> > So, the PC already has a means to authenticate users from both
> > domains. How to enable that means?
> Are you using sssd ?
> If you are, then ask on the sssd-users mailing list, because it is sssd
> that will be doing the authentication, not Samba. We do not produce
> sssd, so know little about it.
> If you are not using sssd, then we can look into your problem.
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
More information about the samba