On Fri, Nov 20, 2020 at 02:51:19AM -0000, Joe Gainey wrote: > I believe we are seeing the same thing. we are running in an unsupported > configuration where we are using sssd+smbd. This is working fine for us, > usually. we run commands like: > > copy *.pdf \\someserver\someshare\somefolder > > and will intermittently get an Access Denied error on the windows client. > > I was able to install winbind and start it and restart smbd. doing this > immediately broke samba access. However, we were able to get successful > resolution on users with wbinfo. > is there a recipe here for allowing samba to share out folders while the > system is joined with sssd? > > [global] > workgroup = ACME > client signing = yes > client use spnego = yes > kerberos method = secrets and keytab > password server = * > realm = ACME.WIDGETS.COM > security = ads > kernel oplocks = yes > vfs objects = acl_xattr > map acl inherit = yes > max connections = 0 > max smbd processes = 0 > > passdb backend = tdbsam > idmap config * : backend = tdb > idmap config * : range = 10000-49999
Hi, please check the messages earlier in this thread. You need SSSD's idmap plugin for winbind. Install the 'sssd-winbind-idmap' (or simialar) package and see man idmap_sss for details. Which version of Samba and SSSD are you using on which platform? bye, Sumit > > > printing = cups > printcap name = cups > load printers = yes > cups options = raw > > log level = 3 passdb:5 auth:5 > > [homes] > comment = Home Directories > valid users = %S, %D%w%S > browseable = No > read only = No > inherit acls = Yes > _______________________________________________ > sssd-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] _______________________________________________ sssd-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected]
