[Samba] Windows 2016 RSAT not connect with samba4 DC

[Rowland penny]

On 30/11/2020 17:15, me at tdiehl.org wrote:
> Hi Rowland,
>
> Just curious, how can you tell he is using sssd? The above entries in 
> nsswitch
> do not necessarily mean he is using sssd. I am running 4.12.latest on 
> Centos 8
> as a DC but have removed the sssd packages. I just looked and the above
> nsswitch entries are still there.
Good point, he may have removed sssd, but not altered /etc/nsswitch.conf 
correctly, but I do not think he has done either, he certainly isn't 
using winbind for getent etc.
>
>> you use winbind (which incidentally you are), you cannot kerberos 
>> with PAM because red-hat removed the required package.
>
> What package would that be?
libpam-krb5
>
> Are you talking about on a DC or a member server. If you are talking 
> about a DC
> kerberos seems to work just fine on a Centos 8 DC. What am I missing?
Yes, it will be working on the DC, just not through PAM.

Rowland