On ti, 08 tammi 2019, Kees Bakker via FreeIPA-users wrote:
Hey,
Is there any chance that the combination FreeIPA + Samba + Ubuntu
is going to work in the near future? So far I haven't been able to.
The main purpose is to give Windows users access to disk space
on our (Ubuntu) servers. And with their IPA credentials.
I don't think it is
going to work (ever) with the current state. Nothing
changed since [1] in Ubuntu.
Also, it is confusing -- what do you mean 'to give Windows users access
.. with their IPA credentials'? What do you use?
Running Samba AD DC with MIT Kerberos KDC will not help you to solve
this task.
I'm currently working on enabling to run Samba on IPA client where it
would be a normal domain member talking to IPA master's Samba as its
domain controller. However, this needs a number of fixes both in FreeIPA
and Samba. Also, since you are running IPA master on Ubuntu, it pretty
much out of question for you as Ubuntu Samba (normal one, not AD DC
variant) is compiled against Heimdal so it cannot be used with FreeIPA
to create a needed infrastructure.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland