----- Forwarded message from Alexander Fieroch 
<[email protected]> -----

Date: Mon, 20 May 2019 15:52:30 +0200
From: Alexander Fieroch <[email protected]>
To: [email protected]
Subject: SSSD + samba shares

Hi,

I'm using SSSD for my AD integration and samba shares.
Since my last upgrade (ubuntu 18.10 -> 19.04) to samba 4.10.0 and sssd 1.16.3
samba shares are not working anymore and I got the error message in
/var/log/samba/log.smbd:


[2019/05/20 12:09:23.022488,  0]
../../source3/auth/auth_util.c:1386(make_new_session_info_guest)
  create_local_token failed: NT_STATUS_NO_MEMORY
[2019/05/20 12:09:23.022542,  0] ../../source3/smbd/server.c:2041(main)
  ERROR: failed to setup guest info.


Newer samba versions require a running winbindd but I use SSSD instead of
winbindd which was working before. The samba team says SSSD is not supported
by samba and I should use winbindd. But I want to stay with SSSD.
So what is the recommended SSSD and samba configuration to get samba shares
working while using SSSD?
Or is it not possible anymore to use only SSSD with samba shares without
winbind?


Thanks!
Best regards


/etc/samba/smb.conf:
[global]
        disable netbios = Yes
        dns proxy = No
        domain master = No
        kerberos method = system keytab
        local master = No
        log file = /var/log/samba/log.%m
        map to guest = Bad User
        max log size = 1000
        obey pam restrictions = Yes
        pam password change = Yes
        panic action = /usr/share/samba/panic-action %d
        passwd chat = *Enter\snew\s*\spassword:* %n\n
*Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
        passwd program = /usr/bin/passwd %u
        realm = DOMAIN
        security = ADS
        server role = member server
        server string = %h %a
        syslog = 0
        unix password sync = Yes
        usershare allow guests = Yes
        workgroup = DOMAIN




----- End forwarded message -----
_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]

Reply via email to