Hi
* CentOS Linux release 7.3.1611 (Core)
* sssd-1.14.0-43.el7_3.4
sssd.conf:
[sssd]
debug_level = 7
domains = my.domain.local
config_file_version = 2
services = nss, pam, ifp
[domain/my.domain.local]
id_provider = ad
auth_provider = ad
ldap_id_mapping = False
access_provider = ad
chpass_provider = ad
cache_credentials = true
ldap_schema = rfc2307bis
samba testparm output:
[global]
realm = MY.DOMAIN.LOCAL
workgroup = MY
disable spoolss = Yes
load printers = No
printcap name = /dev/null
kerberos method = system keytab
security = ADS
idmap config * : backend = tdb
printing = bsd
acl allow execute always = Yes
strict allocate = Yes
use sendfile = Yes
The libwbclient lib is pointing to SSSD's implementation (through
/etc/alternatives/):
# ldd /usr/sbin/smbd | grep libwb
libwbclient.so.0 => /lib64/libwbclient.so.0 (0x00007f919213c000)
# readlink -f /lib64/libwbclient.so.0
/usr/lib64/sssd/modules/libwbclient.so.0.12.0
Win2012R2 domain controllers with a a single domain in the AD forest, I
have populated the rfc2307 attributes in AD. I have run "authconfig
--enablesssd --updateall". "id username" works and resolves the correct
user id and groups.
However, on the security tab in Windows Explorer all domain users are
shown as "Unix User\username" instead of "MY\username".
The only pointer I have found is
http://unix.stackexchange.com/questions/306492/samba-does-not-perform-rev...
but it still does not work for me. Is this possible or will I have to
use winbind?
Best Regards,
Ådne Hovda