On Sat, 2014-06-07 at 17:29 +0000, Vinícius Ferrão wrote:
I dont have Samba4 but I've 2012 R2 as a DC running on BIND9 as a
DNS service. And the updates are not allowed by bind and we are able to use SSSD to
Hope this helps.
Yes, same here. Even though bind allows the signed updates from sssd, we
don't need them. We can authenticate using sssd no matter what IP is
assigned and no matter what is stored in AD. Maybe the ddns requirement
could be removed from the default ad-backend?