On Fri, Nov 20, 2020 at 02:51:19AM -0000, Joe Gainey wrote:
I believe we are seeing the same thing. we are running in an unsupported configuration where we are using sssd+smbd. This is working fine for us, usually. we run commands like:
copy *.pdf \someserver\someshare\somefolder
and will intermittently get an Access Denied error on the windows client.
I was able to install winbind and start it and restart smbd. doing this immediately broke samba access. However, we were able to get successful resolution on users with wbinfo. is there a recipe here for allowing samba to share out folders while the system is joined with sssd?
[global] workgroup = ACME client signing = yes client use spnego = yes kerberos method = secrets and keytab password server = * realm = ACME.WIDGETS.COM security = ads kernel oplocks = yes vfs objects = acl_xattr map acl inherit = yes max connections = 0 max smbd processes = 0
passdb backend = tdbsam idmap config * : backend = tdb idmap config * : range = 10000-49999
Hi,
please check the messages earlier in this thread. You need SSSD's idmap plugin for winbind. Install the 'sssd-winbind-idmap' (or simialar) package and see man idmap_sss for details.
Which version of Samba and SSSD are you using on which platform?
bye, Sumit
printing = cups printcap name = cups load printers = yes cups options = raw log level = 3 passdb:5 auth:5[homes] comment = Home Directories valid users = %S, %D%w%S browseable = No read only = No inherit acls = Yes _______________________________________________ sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.o...