[Samba] pam_winbind, ssh and cross-forest membership...

Marco Gaiarin gaio at lilliput.linux.it
Tue Jan 18 18:15:50 UTC 2022


Mandi! Rowland Penny via samba
  In chel di` si favelave...

> Can you provide a link to where Andrew said this ?

	https://lists.samba.org/archive/samba/2019-November/226864.html

and the thread, but probably re-reading now all the stuff probably i've
misinterpreted something.


> The smb.conf manpage still says this about 'windows use default
> domain':

Andrew say something about this. It suffices NOT to have login clashes, and
there's no login clashes.


Anyway, bount another strange thing about this: domain forest root tree DOM.IT,
four domains joined in forest SUBA.DOM.IT, SUBB, SUBC and SUBD.

User 'a' of domain SUBA.DOM.IT member also of group 'groupa' in forest root tree
domain DOM.IT.

In a machien joined to whatever SUB domain (with or without 'winbind use default domain =
yes'), user 'a' result in group 'groupa'; if the machine is joined to forest
root 'DOM.IT', user NOT belong to 'groupa' user.


I need to dig a bit deeper...

-- 
  Chissà perché quando si sbaglia numero il telefono non è mai occupato.
							(Beppe Grillo)





More information about the samba mailing list