I'm a bit new to Samba4 and using it as an AD DC. I have a functioning server but seem to be having permissions issues.
Currently, if I create a folder (from Windows) in a Samba share, the permissions on the server (from the command line) are in the range of 3000000.
Winbind isn't in use on this server (Ubuntu 14.04, Samba 4.1.6). I decided to use SSS (v1.11.5) in order to view and apply AD permissions from the command line on the server--this is working fine. But the 3000000+ UIDs/GIDs are not resolving correctly on the server, the UIDs/GIDs in AD are different than the 3000000+ IDs being applied by Samba on the server.
I've kept the configuration pretty basic, I've included the relevant (sanitized) config files below. Please let me know if I can provide any additional information.
# smb.conf
[global]
workgroup = WKGP
realm = WKGP.LOCAL
netbios name = SERVER
server role = active directory domain controller
dns forwarder = 8.8.8.8
idmap_ldb:use rfc2307 = yes
# sssd.conf
[sssd]
services = nss, pam
config_file_version = 2
domains = WKGP.LOCAL
[domain/WKGP.LOCAL]
id_provider = ad
access_provider = ad
override_homedir = /srv/samba/Users/%u
krb5_keytab=/etc/sssd/krb5.keytab
I should note, too, that Kerberos authentication is working on the server (i.e. I'm able to kinit [email protected]
) and DNS and all other services appear to be working as well. SSS is also able to getent passwd user
and successfully retrieve an AD user's account information.
Please advise.
Thank you.