[Samba] winbind x sssd

[Alexey A Nikitin]

On 28/01/2021 22:36, Elias Pereira via samba wrote:
> Hello,
> This is kind of a question/survey.
>
> What would be the best choice and why this choice?
>

In my experience, if you need trust support (especially cross-forest trust) and your solution must be client-only (that is for whatever reason you cannot create a FreeIPA domain with trusts to the AD domains) - then Winbind works better. But if your environment is a simple single AD domain (and, as Rowland said, you don't need to run Samba) - SSSD works better. That said, my comparison is of Winbind circa 4.8-4.9 and SSSD around 1.6.x, things may be a bit different comparing latest Winbind 4.13.x and SSSD 2.2.x.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.samba.org/pipermail/samba/attachments/20210129/d3ac5fbb/signature.sig>