On Mon, Jan 16, 2017 at 01:11:22PM +0100, Ådne Hovda wrote:
Hi
* CentOS Linux release 7.3.1611 (Core)
* sssd-1.14.0-43.el7_3.4
sssd.conf:
[sssd]
debug_level = 7
domains = my.domain.local
config_file_version = 2
services = nss, pam, ifp
[domain/my.domain.local]
id_provider = ad
auth_provider = ad
ldap_id_mapping = False
access_provider = ad
chpass_provider = ad
cache_credentials = true
ldap_schema = rfc2307bis
Please try to add 'use_fully_qualified_names = true' as it is on the
stackexchange page you linked below. Fully qualified names are currently
a requirement to make SSSD's libwbclient work correctly.
HTH
bye,
Sumit
>
> samba testparm output:
>
> [global]
> realm = MY.DOMAIN.LOCAL
> workgroup = MY
> disable spoolss = Yes
> load printers = No
> printcap name = /dev/null
> kerberos method = system keytab
> security = ADS
> idmap config * : backend = tdb
> printing = bsd
> acl allow execute always = Yes
> strict allocate = Yes
> use sendfile = Yes
>
>
> The libwbclient lib is pointing to SSSD's implementation (through
> /etc/alternatives/):
>
> # ldd /usr/sbin/smbd | grep libwb
> libwbclient.so.0 => /lib64/libwbclient.so.0 (0x00007f919213c000)
> # readlink -f /lib64/libwbclient.so.0
> /usr/lib64/sssd/modules/libwbclient.so.0.12.0
>
> Win2012R2 domain controllers with a a single domain in the AD forest, I have
> populated the rfc2307 attributes in AD. I have run "authconfig --enablesssd
> --updateall". "id username" works and resolves the correct user id
and
> groups.
>
> However, on the security tab in Windows Explorer all domain users are shown
> as "Unix User\username" instead of "MY\username".
>
> The only pointer I have found is
http://unix.stackexchange.com/questions/306492/samba-does-not-perform-rev...
> but it still does not work for me. Is this possible or will I have to use
> winbind?
>
> Best Regards,
> Ådne Hovda
> _______________________________________________
> sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org