From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <solic@shpl.ru>
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on
 sa.local.altlinux.org
X-Spam-Level: 
X-Spam-Status: No, score=-3.3 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD
 autolearn=unavailable autolearn_force=no version=3.4.1
To: ALT Linux sysadmins' discussion <sysadmins@lists.altlinux.org>,
 Evgeny Sinelnikov <sin@altlinux.org>
References: <11501219590f9d44ae06da1d4f11ef9d@shpl.ru>
 <CAK42-GqGPGd82qauxDjkBAikpGNAjQYRXO6yismMuoZfKR0SHQ@mail.gmail.com>
From: =?UTF-8?B?0KHQtdGA0LPQtdC5?= <solic@shpl.ru>
Message-ID: <56b56872-7730-5347-5c6a-da598d0e0392@shpl.ru>
Date: Tue, 12 Nov 2019 10:23:51 +0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101
 Thunderbird/60.8.0
MIME-Version: 1.0
In-Reply-To: <CAK42-GqGPGd82qauxDjkBAikpGNAjQYRXO6yismMuoZfKR0SHQ@mail.gmail.com>
Content-Type: text/plain; charset=koi8-r; format=flowed
Content-Transfer-Encoding: 8bit
Content-Language: ru
Cc: Igor Chudov <nir@basealt.ru>, Georgy Bystrenin <gkot@basealt.ru>,
 =?UTF-8?B?0JDQvdC00YDQtdC5INCn0LXRgNC10L/QsNC90L7Qsg==?= <cas@basealt.ru>,
 Valery Sinelnikov <greh@basealt.ru>
Subject: Re: [Sysadmins] =?utf-8?b?c2FtYmEgNC45LjEzINC4INGE0LDQudC70YHQtdGA?=
 =?utf-8?b?0LLQtdGA?=
X-BeenThere: sysadmins@lists.altlinux.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: ALT Linux sysadmins' discussion <sysadmins@lists.altlinux.org>
List-Id: ALT Linux sysadmins' discussion <sysadmins.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/options/sysadmins>,
 <mailto:sysadmins-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/sysadmins>
List-Post: <mailto:sysadmins@lists.altlinux.org>
List-Help: <mailto:sysadmins-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/sysadmins>,
 <mailto:sysadmins-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Nov 2019 07:23:59 -0000
Archived-At: <http://lore.altlinux.org/sysadmins/56b56872-7730-5347-5c6a-da598d0e0392@shpl.ru/>
List-Archive: <http://lore.altlinux.org/sysadmins/>

Уважаемые коллеги!

12.11.2019 2:56, Evgeny Sinelnikov пишет:
> Для этого в /etc/samba/smb.conf нужно задать соответствующий мапинг
> (пакет libsss_nss_idmap):
> idmap config * : backend = sss
> (при этом idmap config * : range я, вообще, сначала закомментировал -
> нужно проверять)

Это не проходит

testparm :

ERROR: Do not use the 'SSS' backend as the default idmap backend!

И несмотря на

]# service winbind status
winbindd is running

в логе

  check_winbind_security: winbindd not running - but required as domain 
member: NT_STATUS_NO_LOGON_SERVERS

Сейчас соберу конфиги и перешлю