[Freeipa-users] FreeIPA as Samba Backend, Existing Users Fail

[Armaan Esfahani]

To connect Samba to FreeIPA, I did the following:

 

1.       Install IPA Server

2.       Configure IPA Server

3.       Run ipa-adtrust-install 

4.       Add shares to config using “net conf”

 

 

I also ran the SID gen task when doing the ipa-adtrust-install, and even ran it later manually with an ldapmodify on the script link to be sure.

 

From: <freeipa-users-bounces at redhat.com> on behalf of Alan Latteri <alan at instinctualsoftware.com>
Date: Friday, January 13, 2017 at 8:18 AM
To: Armaan Esfahani <armaan.esfahani at advancedopen.com>
Cc: <freeipa-users at redhat.com>
Subject: Re: [Freeipa-users] FreeIPA as Samba Backend, Existing Users Fail

 

what steps did you use to connect samba to ipa?

 

 

On Jan 11, 2017, at 1:00 PM, Armaan Esfahani <armaan.esfahani at advancedopen.com> wrote:

 

Hi, I have setup a Samba server to use FreeIPA as a password backend, however whenever I try to use existing users to login I get “NT_STATUS_LOGON_FAILURE”. 

Looking at the sssd_nss log on my ipa server, I get the following error “(Wed Jan 11 15:56:11 2017) [sssd[nss]] [fill_sid] (0x0020): Missing SID.”  On all existing accounts, whereas all new accounts function properly (after resetting their passwords).

 

Anyone have any ideas?

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

 

-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20170113/9a953d2e/attachment.htm>