On 08-01-19 10:18, Alexander Bokovoy wrote:
On ti, 08 tammi 2019, Kees Bakker via FreeIPA-users wrote:
> Hey,
>
> Is there any chance that the combination FreeIPA + Samba + Ubuntu
> is going to work in the near future? So far I haven't been able to.
>
> The main purpose is to give Windows users access to disk space
> on our (Ubuntu) servers. And with their IPA credentials.
I don't think it is going to work (ever) with the current state. Nothing
changed since [1] in Ubuntu.
Also, it is confusing -- what do you mean 'to give Windows users access
.. with their IPA credentials'? What do you use?
Well, nothing special, just connect to a Samba share. This is working
with a Samba server on Centos7 in the same IPA network. Note, (see below)
our IPA masters now run on Centos7.
> [1]
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1552249/comments/2
> [2]
https://wiki.samba.org/index.php/Running_a_Samba_AD_DC_with_MIT_Kerberos_KDC
Running Samba AD DC with MIT Kerberos KDC will not help you to solve
this task.
I'm currently working on enabling to run Samba on IPA client where it
would be a normal domain member talking to IPA master's Samba as its
domain controller. However, this needs a number of fixes both in FreeIPA
and Samba. Also, since you are running IPA master on Ubuntu
No I'm not, not anymore. We had a horrible experience of expired certs which
we were never able to resolve. We decided to reinstall the IPA servers on
Centos7. The remainder of the (Linux) systems are Ubuntu as IPA clients.
So far that works well, except the Samba part.
, it pretty
much out of question for you as Ubuntu Samba (normal one, not AD DC
variant) is compiled against Heimdal so it cannot be used with FreeIPA
to create a needed infrastructure.
For testing I have installed Centos7 with Samba (in a LXD container). I
can connect shares on this server to Windows clients using my IPA
credential (keesb(a)GHS.NL).
One of our servers is running Ubuntu with Nextcloud and other stuff. I was
hoping to install Samba as well and then give Windows users access to
certain shares (e.g. home dir). Linux users have better means to access
that server (NFS, SSH, etc).
--
Kees Bakker