11 reputation
5
bio website modes.io
location Santa Cruz, CA
age 47
visits member for 1 year, 6 months
seen Mar 6 at 12:19

Wes Modes is a Santa Cruz artist and art researcher working in the Digital Art and New Media program at the University of California Santa Cruz. In various lives, he is a sculptor, writer, performer, community organizer, programmer, geek, and mischief-maker.


Jun
25
awarded  Popular Question
Mar
6
revised Can't add local user on system using ldap auth for samba
added 532 characters in body
Mar
6
comment Can't add local user on system using ldap auth for samba
Thanks, Andrew. The workarounds were sufficient. It's been a while, but I believe the answer I finally got from the sssd_users list is: "Yes, it may have worked in earlier versions, but it wasn't the best practice to allow shared uids. Newer versions prevent this." While my use case was perfectly valid, sssd (which replaced some of the other systems cobbled together with dental floss and chewing gum) doesn't allow it." In fact, I should add this to the original question. Thanks!
Mar
6
comment Can't add local user on system using ldap auth for samba
No I don't think this question was unclear. I edited the title to better reflect the problem.
Mar
4
awarded  Autobiographer
Aug
13
awarded  Scholar
Aug
13
comment Can't add local user on system using ldap auth for samba
And I strongly believe this is a configuration issue, a gap in my understanding of the complex systems involved, not a software engineering issue. The authors would no doubt have an answer to my query, and perhaps that is where I should seek. There is a mailing list for sssd users.
Aug
13
accepted Can't add local user on system using ldap auth for samba
Aug
11
comment Can't add local user on system using ldap auth for samba
Andrew, I appreciate your taking the time to respond, and I don't think the request is unreasonable nor confusing. To be concise: I want to know how to configure sssd, nss, and pam (preferably with the authconfig tool) to allow local authentication exclusively from /etc/passwd while allowing Samba to use LDAP exclusively for authentication. In fact, I had a RHEL4 system configured precisely this way.
Aug
9
answered Can't add local user on system using ldap auth for samba
Aug
9
comment Can't add local user on system using ldap auth for samba
Okay another workaround, still less than optimal: Adding the local user with the same uidNumber as the LDAP entry. That allows both local and Samba access.
Aug
9
comment Can't add local user on system using ldap auth for samba
This does not answer the original inquiry, but I had to find some temporary workaround: I created a local user with a different UID to give ssh access to a person who already had an LDAP/Samba entry. Possibly the cheeziest sysadmin solution I've done in years.
Aug
9
comment Can't add local user on system using ldap auth for samba
I am definitely not an NSS, PAM, or sssd expert, I feel like I should still be able to effectively configure it. No answer to this question has yet been offered.
Aug
9
comment Can't add local user on system using ldap auth for samba
Please see above: "No, I don't want to edit the user directly into /etc/passwd and /etc/group. I'd like to fix the underlying problem. PLUS THE LOCAL ENTRY INTERFERES WITH ACCESS TO SAMBA." So, unfortunately, no, that isn't a solution.
Jul
26
asked Can't add local user on system using ldap auth for samba
Jul
16
answered Mapping User and Group Ownership through LDAP
Jul
16
awarded  Editor
Jul
16
revised Mapping User and Group Ownership through LDAP
added 519 characters in body; edited title
Jul
13
comment Mapping User and Group Ownership through LDAP
I have a very very simple solution to this problem and will post it as time allows.
Feb
15
awarded  Student