[Freeipa-users] Woes adding a samba server to the ipa domain

[Loris Santamaria]

El lun, 20-10-2014 a las 21:19 -0400, Dmitri Pal escribió:
> On 10/20/2014 09:15 AM, Loris Santamaria wrote:

[...]

> > 
> > Trying to join the server to the domain (net rpc join -U domainadmin -S
> > ipaserver) fails, and it causes a samba crash on the ipa server.
> > Investigating the cause of the crash I found that pdbedit crashes as
> > well (backtrace attached). I couldn't get a meaningful backtrace from
> > the samba crash however I attached it as well.
> > 
> > Seems to me that the samba ipasam backend on ipa doesn't like something
> > in the host or the "domain computers" group object in ldap, but I cannot
> > see what could be the problem. Perhaps someone more familiar with the
> > ipasam code can spot it quickly.

> Do I get it right that you really looking for
> https://fedorahosted.org/sssd/ticket/1588 that was just released
> upstream?
> It would be cool if you can try using SSSD 1.12.1 under Samba FS in
> the use case you have and provide feedback on how it works for you.
> 
> AFAIU you install Samba FS and then use ipa-client to configure SSSD
> under it and it should work.
> If not we probably should document it (but I do not see any special
> design page which leads me to the above expectation).

Ok, I'll happily try sssd 1.12.1.

Just a question, in smb.conf one should use "security = domain" or
"security = ads"?

Best regards

-- 
Loris Santamaria   linux user #70506   xmpp:loris at lgs.com.ve
Links Global Services, C.A.            http://www.lgs.com.ve
Tel: 0286 952.06.87  Cel: 0414 095.00.10  sip:103 at lgs.com.ve
------------------------------------------------------------
"If I'd asked my customers what they wanted, they'd have said
a faster horse" - Henry Ford
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5693 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20141021/24a122c4/attachment.bin>