I've setup a CentOS 7 machine, and joined it to our AD via
yum install realmd samba-common oddjob oddjob-mkhomedir sssd realm join --email@example.com mydomain.local
realm list returns the expected output
[root@webdev samba]# realm list mydomain.local type: kerberos realm-name: MYDOMAIN.LOCAL domain-name: mydomain.local configured: kerberos-member server-software: active-directory client-software: sssd required-package: oddjob required-package: oddjob-mkhomedir required-package: sssd required-package: adcli required-package: samba-common login-formats: %U@mydomain.local login-policy: allow-realm-logins
and I can login via SSH using my AD credentials ( so I get firstname.lastname@example.org@hostname).
I now need to allow Windows users to access a folder on the machine, however Samba seems to be unwilling to cooperate - all combinations or username and password come back as wrong. I do not know how to debug this, or if I am missing something out.
smb.conf file is basically:
[root@webdev samba]# testparm Load smb config files from /etc/samba/smb.conf rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) Processing section "[vHosts]" Loaded services file OK. Server role: ROLE_DOMAIN_MEMBER Press enter to see a dump of your service definitions [global] workgroup = MYDOMAINLOCAL realm = MYDOMAIN.LOCAL server string = Samba Server Version %v security = DOMAIN log file = /var/log/samba/log.%m max log size = 50 load printers = No idmap config * : backend = tdb hosts allow = 127., 10.0. cups options = raw [vHosts] comment = Virtual Host repository path = /var/www/vhosts valid users = MYDOMAINLOCAL\%S read only = No
I should note that I've changed the directory (
/var/www/vhosts ) system permissions to 777.
Any help will be greatly appreciated. Thanks in advance!
- DC is Windows 2003 R2, clients are Windows 7
- Have tried setting security to both
domain, with similar results (no cigar)
- Error message being received at the Windows credentials dialog is "Access is denied"
- Tried both with firewall disabled and enabled, no difference
- SELinux is disabled
Searching for krb* packages:
[root@webdev logs]# rpm -qa | grep krb sssd-krb5-common-1.11.2-68.el7_0.5.x86_64 sssd-krb5-1.11.2-68.el7_0.5.x86_64 samba-winbind-krb5-locator-4.1.1-35.el7_0.x86_64 krb5-libs-1.11.3-49.el7.x86_64
and the command output
getent passwd MYDOMAINLOCAL\myuser and
getent passwd mydomain.local\myuser return blank ( no output ).