That guide at techslaves.org sounds like a perfect match for our needs,
unfortunately the map and reality didn't quite match...
Point 4.3 says:
> 4.3. Test the CLI. With an “admin” (or equivalent priv) kerberos
> ticket, try creating a new group:
> $ ipa group-add testgrp --desc="Testing the group.py CLI mods"
> Added group "testgrp"
> Group name: testgrp
> Description: Testing the group.py CLI mods
> GID: 1234500010
> Samba Group Type: 4
So I did. However, all I get is:
> ipa: ERROR: Unknown option: sambagrouptype
but I've followed the instructions carefully. There's, however, an added
complication here and that's that the sambaserver runs on a different
machine than the IPA-server and since it's not obvious (to me at least)
which part goes where I ran all the commands on the sambaserver. I bet
at least some of the steps would have to be run on the IPA-server.
Does anyone have an idea what went wrong? All the commands went through
without a problem until ipa group-add...
On 03/24/2013 04:06 PM, Simo Sorce wrote:
> On Sun, 2013-03-24 at 10:03 +0600, Arthur Fayzullin wrote:
>> 24.03.2013 04:27, Martin пишет:
>>> Hello, apologize if this is a faq.
>>> We're trying to set up a file server that authenticate all users against
>>> a FreeIPA-server. The systems are up to date CentOS 6 machines and
>>> everything works just swell for logins and NFS4-mounts. However, we're
>>> completely stuck on samba.
>>> We've tried to figure out how to make a samba 3 use PAM, ldap or
>>> whatever (and that way authenticate towards FreeIPA) and right now we're
>>> trying Samba 4 because we hoped that would be simpler. So far we're out
>>> of luck.
>>> What we want is just a stand alone samba server (there's no windows
>>> servers on this network) that is connected to FreeIPA. It sounds like a
>>> pretty basic thing to get to work, but apparently that's not the case.
>>> ...help? Maybe someone has a working config they could share?
> A while ago someone made this post:
> It is not the only way to configure samba but it is a possible solution
> for your request.
>> This is about samba-sharea, but may be can help
> If you are interested in client cifs just ignore point 4 and 5 of
> 11.4.2, they must be cut&paste errors from nfs client instructions, I am
> filing a bug to fix it.
> Freeipa-users mailing list
Freeipa-users mailing list