[Freeipa-users] AD membership realmd way + samba?

[Sumit Bose]

On Thu, May 19, 2016 at 05:42:27PM +0100, lejeczek wrote:
> hi users/devs
> 
> I've poked around samba list but was suggested to ask sssd people, I thought
> IPA's might know as well.
> 
> Having joined AD with realm - can samba take advantage of this membership?
> And if so then to what extent?

realmd can use different backends to join the AD domain Samba's net
utility or adcli, this can be chosen with the --membership-software
option. If you use net Samba should work out-of-the-box. adcli does not
write the host keys into Samba's internal secrets.tdb and hence you
might need some additional configuration on the Samba side, see the
'kerberos method' entry in the smb.conf man page for details.

HTH

bye,
Sumit

> 
> many thanks,
> 
> L.
> 
> -- 
> Manage your subscription for the Freeipa-users mailing list:
> https://www.redhat.com/mailman/listinfo/freeipa-users
> Go to http://freeipa.org for more info on the project