On Tue, May 03, 2016 at 07:04:42PM +0200, Stefan Fuhrmann wrote:
Hello all,
Im having a win server 2012 with AD and centos 7.2 with samba4 as client.
On the centos client I want to do a cifs share with active directory
authentication. I configured all and "id" and "getent" are working.
I raed that I have to configure permission on the samba share with windows
explorer. I can do that but after closing the security tab and reopen it in
win explorer only win SID are shown in security tab. Please have a look to
attached screenshot.
Please try to install the sssd-libwbclient package. This provides a
library which sends some of the request Samba would typically send to
winbbind to SSSD.
HTH
bye,
Sumit
sssd.conf:
[sssd]
services = nss, pam
config_file_version = 2
domains = samba
debug_level = 9
[nss]
filter_users = root
filter_groups = root
[pam]
[domain/samba]
ad_hostname = centi.samba.dance
ad_server = dc.samba.dance
ad_domain = samba
default_shell = /bin/bash
override_homedir = /home/%u
ldap_schema = ad
id_provider = ad
access_provider = ad
# on large directories, you may want to disable enumeration for performance
reasons
enumerate = true
cache_credentials = true
auth_provider = krb5
chpass_provider = krb5
ldap_sasl_mech = GSSAPI
ldap_sasl_authid = centi$(a)SAMBA.DANCE
krb5_realm = SAMBA.DANCE
krb5_server = dc.samba.dance
krb5_kpasswd = dc.samba.dance
krb5_keytab = /etc/krb5.keytab
ldap_krb5_init_creds = true
ldap_referrals = false
ldap_uri = ldap://dc.samba.dance
ldap_search_base = dc=samba,dc=dance
dyndns_update=false
ldap_id_mapping=true
I searched the web, books... play around with ID- mapping....
Also asking on samba mailinglist was no one who can help.
Nothing helps.
How to get the windows usernames in security tab?
Can someone help?
Tia
Stefan
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahosted.org